EP3093782A1 - Determining validity of subscription to use digital content - Google Patents

Determining validity of subscription to use digital content Download PDF

Info

Publication number
EP3093782A1
EP3093782A1 EP16158631.8A EP16158631A EP3093782A1 EP 3093782 A1 EP3093782 A1 EP 3093782A1 EP 16158631 A EP16158631 A EP 16158631A EP 3093782 A1 EP3093782 A1 EP 3093782A1
Authority
EP
European Patent Office
Prior art keywords
attributes
subscription
entities
content
electronic device
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
EP16158631.8A
Other languages
German (de)
French (fr)
Inventor
Augustin J. Faruggia
Glampaolo FASOLI
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Apple Inc
Original Assignee
Apple Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Apple Inc filed Critical Apple Inc
Publication of EP3093782A1 publication Critical patent/EP3093782A1/en
Withdrawn legal-status Critical Current

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/08Payment architectures
    • G06Q20/12Payment architectures specially adapted for electronic shopping systems
    • G06Q20/123Shopping for digital content
    • G06Q20/1235Shopping for digital content with control of digital rights management [DRM]
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/10Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/10Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
    • G06F21/106Enforcing content protection by specific content processing
    • G06F21/1062Editing
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2135Metering
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2137Time limited access, e.g. to a computer or data

Definitions

  • the present invention relates to digital rights management systems and in particular to determining the validity of subscription to use digital content.
  • DRM Digital Rights Management
  • Digital content can be software, music, video, news clip, game, image, or any other content distributed in digital form.
  • Parts of software to implement DRM may run on a server controlled or trusted by the content provider while other parts of the software may be loaded into the user computer either separately or as a part of a platform that allows the user to download and use the content.
  • a subscription model is used where the user is required to pay a periodic subscription fee.
  • the user can download an agreed upon (sometimes unlimited) number of content files.
  • the user can also use the content (e.g., listen to a downloaded music track, watch a downloaded movie, play a downloaded game, etc.) as long as the subscription is up-to-date. Therefore, in order to protect the content provider's rights, the DRM process has to be able to determine the validity of subscription when a user wants to use the content.
  • the DRM process can check the validity of the subscription by comparing the expiration time and date of the subscription with the time and date obtained from a trusted source. Once the user goes offline, however, the task of ensuring the validity of the subscription becomes more difficult.
  • the DRM has to rely on the usually untrusted source of time on the user device.
  • many operating environments such as Apple Mac OS X ® or Microsoft Windows ®
  • a user can easily change the user device system clock. For instance, in order to defeat a DRM system that solely relies on the user device system clock, the user can buy subscription for a limited time, download content, and continue using the downloaded content offline by changing the system clock back to a date and time when the subscription was still valid.
  • Some embodiments provide a method for determining whether a subscription for using digital content on a user device has elapsed.
  • the method compares a first collision free image of a first set of entities in the user device with a second collision free image for a second set of entities in the user device at a second instance in time. Based on the comparison, the method determines whether the subscription has elapsed.
  • each collision free image includes a slow growth population of entities in the user device, a fast growth population of entities in the user device, and a medium growth population of entities in the user device. In other embodiments, each collision free image includes different types of populations and/or fewer or more types of populations.
  • the comparison of the collision free images includes the comparison of a set of attributes of a set of entities in the user device to a set of acceptable operational parameters. In some embodiments, the comparison includes the computation and comparison of statistics calculated for a set of attributes of a set of entities in the user device. Some embodiments at least partly compute the statistics at the time of the generation of the collision free images and/or at the time of the comparison of the collision free images.
  • Some embodiments provide a digital rights management (DRM) method that compares information for a first set of attributes of the user device at a first instance in time with information of a second set of attributes at a second instance in time. Based on the comparison, the method determines whether the user device environment (e.g., the user device clock, files, directories, etc.) has been manipulated to circumvent DRM protection for accessing a set of content on the user device.
  • DRM digital rights management
  • Some embodiments provide a method of distributing digital content.
  • the method distributes content on subscription basis and uses an evolutionary algorithm to determine whether a subscription to use digital content has expired.
  • the method determines whether a population of entities related to a user device has evolved from a previously sampled population.
  • the method selects the entities and their attributes from a current population based on their fitness, and modifies the selected entities to form a new population for evaluating an evolution for the next generation of said entities.
  • Some embodiments of the invention provide a digital rights management (DRM) method that (1) compares a first set of attributes of a device at a first instance in time with a second set of attributes at a second instance in time; and (2) based on the comparison, determines whether the device has been manipulated to circumvent DRM protection for accessing a set of content on the device.
  • DRM digital rights management
  • the method may also be complemented by the following features:
  • the method may also be complemented by the following features:
  • the method may also be complemented by the following features:
  • the method may also be complemented by the following features:
  • the method may also be complemented by the following features:
  • Some embodiments also provide a computer readable medium storing a digital rights management (DRM) program for execution.
  • This program comprises sets of instructions for (1) comparing a first set of attributes of a device at a first instance in time with a second set of attributes at a second instance in time; and (2) based on the comparison, determining whether the device has been manipulated to circumvent DRM protection for accessing a set of content on the device.
  • DRM digital rights management
  • the computer readable medium may also be complemented by the following features:
  • the computer readable medium may also be complemented by the following features:
  • the computer readable medium may also be complemented by the following features:
  • the computer readable medium may also be complemented by the following features:
  • the computer readable medium may also be complemented by the following features:
  • Some embodiments of the invention provide a method for determining whether a subscription for using content on a device has elapsed. This method (1) compares a first collision free image of a first set of entities in the device at a first instance in time with a second collision free image of a second set of entities in the device at a second instance in time; and (2) based on the comparison, determines whether the subscription has elapsed.
  • Some embodiments of the invention provide a computer readable medium that stores program for execution.
  • the program determines whether a subscription for using content on a device has elapsed.
  • the program comprises sets of instructions for (1) comparing a first collision free image of a first set of entities in the device at a first instance in time with a second collision free image of a second set of entities in the device at a second instance in time; and (2) based on the comparison, determining whether the subscription has elapsed.
  • the computer readable medium may also be complemented by the following features:
  • Some embodiments of the invention provide a method that (1) receives content on subscription basis, and (2) uses an evolutionary process to determine whether a subscription to use content has expired.
  • Some embodiments also provide a computer readable medium that stores a program for execution.
  • the program comprises sets of instructions for (1) receiving content on subscription basis, and (2) using an evolutionary process to determine whether a subscription to use content has expired.
  • Some embodiments of the invention also provide a method that (1) receives a request regarding status of a subscription for using content on a remote device, (2) determines whether the subscription is valid, and (3) generates a response to the request regarding the status of subscription.
  • Some embodiments of the invention provide a computer readable medium storing a program for execution.
  • the program (1) receives a request regarding status of a subscription for using content on a remote device; (2) determines whether the subscription is valid; and (3) generates a response to the request regarding the status of subscription.
  • Some embodiments of the invention provide a device for accessing content.
  • the device comprises (1) a storage for storing content; (2) a plurality of entities; and (3) an electronic component for determining whether a subscription to access content on the device has expired based on the change over time of a plurality of attributes of a plurality of entities.
  • Some embodiments of the invention provide a method that (1) identifies a particular device environment in which a plurality of contents will be accessed; (2) identifies a set of entities on the particular device environment that have attributes with predictable behaviors; and (3) defines a digital rights management (DRM) process for use during a runtime of a device, where the DRM process is for determining whether the changes to attributes of each entity is as predicted.
  • DRM digital rights management
  • Some embodiments of the invention provide a computer readable medium storing a program for execution.
  • the program comprises sets of instructions for (1) analyzing attributes of a set of entities on a device at different instances in time when a trusted source of time is not available; and (2) allowing access to the digital media when the attributes have changed within expected thresholds.
  • Some embodiments provide a method for determining whether a subscription for using digital content on a user device has elapsed.
  • the method compares a first collision free image of a first set of entities in the user device with a second collision free image for a second set of entities in the user device at a second instance in time. Based on the comparison, the method determines whether the subscription has elapsed.
  • each collision free image includes a slow growth population of entities in the user device, a fast growth population of entities in the user device, and a medium growth population of entities in the user device. In other embodiments, each collision free image includes different types of populations and/or fewer or more types of populations.
  • the comparison of the collision free images includes the comparison of a set of attributes of a set of entities in the user device to a set of acceptable operational parameters. In some embodiments, the comparison includes the computation and comparison of statistics calculated for a set of attributes of a set of entities in the user device. Some embodiments at least partly compute the statistics at the time of the generation of the collision free images and/or at the time of the comparison of the collision free images.
  • Some embodiments provide a digital rights management (DRM) method that compares information for a first set of attributes of the user device at a first instance in time with information of a second set of attributes at a second instance in time. Based on the comparison, the method determines whether the user device environment (e.g., the user device clock, files, directories, etc.) has been manipulated to circumvent DRM protection for accessing a set of content on the user device.
  • DRM digital rights management
  • Some embodiments provide a method of distributing digital content.
  • the method distributes content on subscription basis and uses an evolutionary algorithm to determine whether a subscription to use digital content has expired.
  • the method determines whether a population of entities related to a user device has evolved from a previously sampled population.
  • the method selects the entities and their attributes from a current population based on their fitness, and modifies the selected entities to form a new population for evaluating an evolution for the next generation of said entities.
  • Section I provides an overview of the content-distribution system of some embodiments. This discussion is followed by a discussion of a subscription model used by some embodiments in Section II. Next, Section III describes life cycle analysis that some embodiments use to test the validity of a user subscription. Last, Section IV describes a computer system used by some embodiments of this invention.
  • Figure 1 illustrates a content-distribution system 100 of some embodiments.
  • This content-distribution system distributes content in a manner that protects the digital rights (i.e., ensures the legal use) of the content.
  • the content-distribution system 100 includes a DRM server set 110 and a content-receiving user device 115.
  • the content-distribution system 100 can serve many user devices.
  • Figure 1 illustrates the user device 115 as a portable computer.
  • the user device 115 can be a desktop computer, a personal digital assistance (PDA), an audio player, a video player, or any other user device capable of receiving content online.
  • the user device 115 connects to the DRM server set 110 through a computer network 120, such as a local area network, a wide area network, a network of networks (e.g., the Internet), etc.
  • a computer network 120 such as a local area network, a wide area network, a network of networks (e.g., the
  • the user device 115 communicates with the set of DRM servers 110 to purchase, license, update, or otherwise obtain content in some embodiments. Accordingly, while in some embodiments, the DRM server set 110 sells or licenses content to user devices, this set in other embodiments does not sell or license the content. For instance, in some embodiments, the DRM server set 110 simply enforces the distribution of content to authorized user devices without having any financial objectives.
  • the DRM server set 110 includes a content caching server that provides encrypted content to a user device 115 through the network 120, after another server in the DRM server set 110 determines that the user device 115 can obtain content.
  • the system 100 uses multiple caching servers to cache content at various locations on the network, in order to improve the speed and efficiency of downloading content across the network.
  • the downloaded content can be copied from the user device 115 into one or more other user devices.
  • Figure 1 illustrates the other user device as a portable media player 125.
  • the portable media player can be any device capable of utilizing the downloaded content.
  • the portable player could be a music player, a video player, a game box, a camera, etc.
  • the portable media player can be connected to the user device 115 via a connection such as a Universal Serial Bus (USB), IEEE 1394, infrared, wireless connection, or any other connections known in the art.
  • USB Universal Serial Bus
  • DRM server 110 simply enforces the distribution of content to authorized computers without considering any financial objectives.
  • an a la carte download model is used where a user pays a one-time fee to download a particular content. Depending on the terms of use, the user is granted unlimited use, use for a certain period of time, or use for a certain number of times.
  • a subscription model is used where the user is required to pay a periodic subscription fee.
  • the user can download an agreed upon (sometimes unlimited) number of content files.
  • the user can also use the content (e.g., listen to a downloaded music track, watch a downloaded movie, play a downloaded game, etc.) as long as the subscription is up-to-date. Therefore, in order to protect the content provider's rights, the DRM process has to be able to determine the validity of subscription when a user wants to use the content.
  • the DRM server set 110 of some embodiments can check the validity of the subscription by comparing the expiration time and/or date of the subscription with the time and/or date obtained from a trusted source. Once the user goes offline, however, the task of ensuring the validity of the subscription relies on the life cycle analysis of some embodiments. Some embodiments rely on the life cycle analysis to determine the validity of a user's subscription even when the user device 115 is connected to the DRM server set 110 directly or through another user device.
  • FIG. 2 conceptually illustrates a subscription renewal process of some embodiments. As shown in Figure 2 , after the user goes online (at 205), the process determines (at 210) whether the user has no subscription or has an expired subscription.
  • the process proceeds to 220 which is described below.
  • the process guides the user (at 215) to buy or renew subscription for a period of time.
  • the process updates the user subscription information on the user device 115.
  • the subscription information on the user device 115 is synchronized with the information on the DRM server 110.
  • the user can download (at 225) the agreed upon number of content into the user device 115.
  • some embodiments verify the validity of the subscription by using a trusted source of time.
  • the DRM module running on the user device uses the life cycle analysis of some embodiments to make sure the subscription to use the digital content has not expired.
  • some embodiments implement a technique to perform a life cycle analysis on the user device.
  • the life cycle analysis can be performed both on a user device (e.g., user device 115) that directly connects to the DRM server set through the network as well as a user device (e.g., the user device 125) that connects to the DRM server set through other user devices.
  • the life cycle analysis is performed on a user device by the user device.
  • several groups of files, file folders, directories, volumes, or any other user device entities with known or predictable behaviors are selected and analyzed.
  • a snapshot of certain attributes of these entities e.g., last access date of a file, creation date of a file, size of a folder, etc.
  • Some embodiments calculate statistics for some the attributes and save these calculations.
  • the evolution of these populations for instance changes in the attributes as well as absence or presence of certain files or directories, is then analyzed to determine whether the observed changes between two snapshots correlate to the elapsed time indicated by the user device system clock.
  • Figure 3 conceptually illustrates the subscription validity checking process 300 of some embodiments.
  • the process determines that the user wants to use a downloaded content based on the subscription model. For instance, the user might want to listen to a music track, watch a movie, read an article, watch an image, play a game, etc.
  • the process uses the user device's clock to check if the subscription has expired. If the subscription has expired based on the user clock, the user is requested (at 315) to go online and renew the subscription. Otherwise, the process uses (at 320) a natural evolution test to determine whether the user device clock may have been changed or the user device environment has been manipulated. The details of the natural evolution test are described in the following sections.
  • the evolution test determines (at 320) that the user device environment has been manipulated or the user device clock is not reliable (and therefore, the subscription might have expired), the user is requested (at 325) to go online and synch up the subscription with the DRM server set 110. Otherwise, if at 330, the evolution test determines a normal evolution, the user is allowed to use the downloaded content that was obtained through the user's subscription. In some embodiment, the evolution test is done concurrently with the user using the content. In these embodiments (not shown), the user is requested to synch up after the current content is used by the user. In other embodiments, the user is prevented to use the downloaded content until the user synchs up with the DRM server 110.
  • life cycle analysis is described by using several examples. A person of ordinary skill in the art would, however, realize that the invention may be practiced without the use of these specific details.
  • the life cycle analysis can be performed on any user device (such as personal computers, music players, video players, personal digital assistants, cameras, etc.) that is capable of running software to perform the life cycle analysis and has a set of files or other entities whose attributes can be acquired to do the analysis.
  • the life cycle analysis is not limited to the attributes and file categories shown in the examples and can be practiced using other attributes and other user device entities to do the analysis.
  • the life cycle analysis includes a natural evolution test.
  • the natural evolution test is performed by comparing the current snapshot of a population attributes with a previous snapshot of the population attributes to determine of the changes are acceptable.
  • the natural evolution test also ensures that the rest of the user environment has not been modified to mislead the life cycle analysis. Based on the comparison of the current snapshot with the previous snapshot, the natural evolution test determines whether the user device environment has been manipulated to circumvent DRM protection for accessing content on the user device.
  • the populations and their attributes to monitor are selected in a way that no two snapshots can be the same. Each snapshot, therefore, generates a collision free image (CFI) for the selected populations.
  • Some embodiments save certain attributes of the selected populations in the CFI.
  • Some embodiments calculate statistics of certain attributes of different populations and save the statistics in the CFI.
  • the CFI contains a combination of individual attributes of some population members (e.g., certain attributes of particular files, folders, volumes, etc. that have known behavior) as well as statistics of portions populations as a whole (e.g., average or total size of all files in a certain population).
  • the CFI also contains name and/or location information to identify each population and its members.
  • Some embodiments take snapshots of certain population of files, folders, directories, volumes, or any other entities of a user device hardware or software that has known or predictable behavior and save their attributes (or statistics of those attributes) into a collision free image (CFI). In some embodiments, each snapshot creates a separate CFI.
  • CFI collision free image
  • Selection of these populations depends on the particular user device. Some embodiments make the selection based on the user device environment, e.g., the particular operating system running on the user device, applications running on the user device, as well as the user device hardware configuration.
  • the structure, type, attributes, and behaviors of each population are carefully analyzed to determine a set of entities (such as files, folders, directories, volumes, hardware profiles, etc.) with predictable behavior.
  • Heuristics, trial and errors, as well as study of system description documents and development guides may be used to identify a set of device entities and their specific attributes to be used in the life cycle analysis. Some embodiments identify different groups of entities with similar behavior and make a population from them. For instance, some embodiments identify slow, medium, and fast evolving entities in a user device and allocate them to different populations.
  • the populations in the user device are analogous to human population.
  • Some human populations e.g., tribes living in remote areas, change very slowly. In a certain period of time, these tribes have very few people coming and going and have very few births and deaths.
  • people come and go all the time and there are fairly large number of births and deaths. There are yet other cities or localities with moderate evolutions.
  • some embodiments analyze three types of populations to create a snapshot of slow evolving population, medium evolving population, and fast evolving population.
  • populations of entities in a user device need not be limited to the three mentioned in above example, as additional or fewer levels of granularity can be used. Some of the examples given below, however, use the three categories of slow, medium, and fast evolving population for simplicity.
  • the natural evolution test of some embodiments implements a genetic algorithm that determines whether a population of entities related to the user device (i.e., entities in the user device or entities in the user device environment, e.g., entities in a local area network connected to the user device) has evolved from a previously sampled population.
  • Genetic algorithms are a particular class of evolutionary algorithms that use techniques inspired by Darwin's theory of evolution such as inheritance, mutation, natural selection, and recombination.
  • the natural evolution test of these embodiments starts with a certain population.
  • the evolution starts from the first set of entities in the population and evolves in generations. In each generation, the whole population is evaluated to determine if the evolution is reflective of the elapsed time indicated by the user device.
  • entities and their attributes are selected from the current population based on their fitness, modified (i.e., mutated or recombined) to form a new population for evaluating the evolution of the next generation.
  • Figure 4 conceptually illustrates a CFI 400 that includes a snapshot of three types of populations 405-415 in a user device. Comparing to human tribes, these populations may be slow evolving, fast evolving or somewhere in between. For instance, in some operating systems, system files and directories make a large population. Although the population may have many members, the population is static except for the last access dates of population members. The user may frequently use the system entities but seldom upgrade or update them.
  • user files and directories may be a large population with fast evolution.
  • a user may surf the Internet and add cookies and download files.
  • the user may edit, modify, create, and delete files and directories in the user area.
  • Another example of a population may be a group of applications.
  • the application files may make a small population that is mainly static.
  • Figure 5 illustrates an example of two snapshots 505 and 510 of a system taken approximately two days apart. In this figure, the numbers are hypothetical and are used as an example only.
  • the file “WindowsUpdate.log” located in the folder “C: ⁇ WINDOWS” is in both CFI (snapshots) 505 and 510.
  • the two snapshots 515 and 520 of this file show that the size of this file has increased from 1,650 kilo bytes (KB) to 1,860 KB in the time the two snapshots were taken.
  • the "Date Modified” and “Date Accessed” attributes have also changed while the "date Created” attribute has not changed.
  • the evolution test Whether or not the two snapshots of this file would pass the evolution test, depends on how the evolution heuristics had expected this file to evolve in the time between the two snapshots. Based on the heuristics, trial and error, information in different system and manufacturer documents, the evolution test would have a predetermined change threshold for different attributes of this file.
  • this specific file (which is a system log file) should change by at least 10 kilo bytes (KB) a day and it should be accessed and modified at least once a day.
  • the creation date of the file should not change.
  • this specific file would pass the evolution test.
  • Nothing unexpected is detected for this file during the period of approximately two days indicated by the user device clock.
  • the life cycle analysis had determined that the size of the file should change by at least 150 KB a day, the file would not have passed the evolution test.
  • the file Acrobat.exe shown in Figure 5 is another example of a file for which two snapshots 525 and 530 are taken. As shown, this file is located in "C: ⁇ Program Files ⁇ Adobe ⁇ Acrobat 5.0" folder. Let's assume that this is an application file and evolution test does not expect it to change except for the "Date Accessed". As shown in the example, however, the "Date Accessed" attribute of the snapshot taken on 4/3/2006 at 8:56 pm shows a last accessed date of 4/5/2006 at 5:48 PM. This will be an indication to the evolution test that the user device clock that indicates the time of the last snapshot to be 4/3/2006 at 8:56 PM may not have been correct. As was shown in step 325 in Figure 3 , the user will be requested to go online and synch up his/her subscription.
  • the CFI can also contain statistics for all or portions of different populations.
  • the conceptual example shown in Figure 5 is the two snapshots 535 and 540 taken for a group of folders that contain cookies for different users.
  • several users may have access to a particular user device and each user may have his/her own assigned area of the memory space (e.g., hard disk) for receiving the cookies downloaded to the hard disk while the user is surfing the Internet.
  • the CFI contains statistics about many or all folders in the hard disk that contain user cookies.
  • individual folders containing cookies for individual users may be monitored.
  • the two snapshots 535 and 540 show that the total size of this population has increased from 147,618 bytes to 168,618 bytes between the two snapshots. Also, the number of objects in the population has changed from 99 to 120. The example also shows that the earliest creation date, the last modification date, and the last access date of the population are also being monitored. As shown, the last "Date Modified” and last “Date Accessed” attributes have changed between the snapshots while the earliest "Date Created" has not changed.
  • the evolution test Whether or not the two snapshots 535 and 540 would pass the evolution test, depends on how the life cycle analysis heuristics had expected this population to evolve in the two days, one hour, and 24 minutes elapsed time that the user device clock shows between the two snapshot. As shown the first snapshot was taken on 4/1/2006 at 7:32 PM and the second snapshot was taken on 4/3/2006 at 8:56 PM. Based on the heuristic, trial and error, information in different system and manufacturer documents, the evolution test would have a predetermined change threshold for different attributes of this population.
  • the life cycle analysis determines that the size of a specific population that contains cookies should change by at least 5 KB a day but not more than 20 KB a day. Also, let's assume that the life cycle analysis expects that there should at least be 5 new cookies per day, the population should be modified and/or accessed at least once a day and the earliest creation date should not change. Under these assumptions, the two snapshots 535 and 540 would pass the evolution test. There is nothing unexpected that is detected in this population during the period indicated by the user device clock. On the other hand, if the life cycle analysis heuristics had determined that the size of the population should change by at least 15 KB a day, or there should be at least 20 objects a day added to the population, the population would not have passed the evolution test.
  • the above examples were given using a Microsoft Windows XP Professional ® operating system.
  • a person of ordinary skill in the art would realize that other operating systems may have a different files and folder structure, a different nomenclature for their file structure, may have other attributes that can be monitored, etc.
  • the snapshots may be taken periodically and/or based on certain events (e.g., whenever a user is trying to access a downloaded content or whenever a user has accessed a predetermined number of downloaded content).
  • the thresholds used by the evolution test may have a different granularity than a day or even a certain time period. The thresholds may be based on frequency of access to downloaded content or any other acceptable criteria determined by trial and error, heuristics, etc.
  • Figure 6 illustrates a process 600 for building a collision free image in some embodiments.
  • some embodiments identify several populations for each type of user device environment.
  • the life cycle analysis process selects the populations that are identified for the particular user device type. In some embodiments, the population members are selected before each snapshot is taken. In other embodiments, the population members are selected less frequently.
  • the process initially identifies (at 605) a fast evolving population on the user device.
  • the process gets (at 610) information from the user device about the attributes of the population members.
  • attributes are size, creation date, last modification data, last access date, absence or presence of certain files or directories, etc.
  • selected attributes of environment in which the user device operates are also included in the CFI. A person of ordinary skill in the art would realize that other attributes may also be used without deviating from the teachings of the invention.
  • the process then saves (at 610) the information in the CFI.
  • the saved information can be the current values of selected attributes of particular files or folders or other entities.
  • the saved information can also be in the form of statistics calculated for certain members of the population. For instance, the statistics may include average, maximum, minimum, mean, standard deviation, or any other statistics calculated for a portion or all members of the population.
  • the process identifies (at 615) a population of medium evolving device entities.
  • the process gets information from the user device about the attributes of the population members and adds it to the CFI.
  • the process identifies (at 625) a population of slow evolving device entities.
  • the process then gets information (at 630) from the user device about the attributes of the population members and adds the information to the CFI.
  • the process 600 is shown to identify and collect information for three types of populations, the evolution test is neither limited to three populations nor the populations are solely selection based on how fast they evolve. Therefore, the process 600 may identify several populations based on criteria determined during the development of the evolution phase for the particular user device and use those populations to generate the CFI.
  • the evolution test is not performed every time a user accesses downloaded content.
  • Different embodiments use different criteria for determining whether the evolution test needs to be performed. For instance, some embodiments may perform the evolution test once out of several times a user accesses any content, once out of several times a user accesses a particular content, randomly, or by any other criteria that is determined during the evolution test development. Some embodiments may use a combination of several criteria to determine whether the evolution test has to be performed. Also as described below, once the evolution test has determined that the user needs to synchronize the subscription, some embodiments set an internal flag that prevents the user to access the content without performing any further evolution tests until the subscription is synchronized.
  • Figure 7 illustrates a process 700 that some embodiments utilize to determine whether the evolution test has to be performed.
  • the process is activated when there may be a need to perform the evolution test.
  • the process 700 of some embodiments may be activated before operation 320 is performed. Therefore, in these embodiments, operation 320 (and operation 325 if needed) will only be performed if the process 700 determines that evolution test has to be performed.
  • the process determines (at 705) whether the criteria to perform the evolution test have been satisfied. For instance, if in a particular embodiment, the evolution test is performed every 10 times that the user accesses content that require subscription, the process checks whether the user has already accessed the content at least ten times. If the criteria are not satisfied, the process at 710 updates the criteria, e.g., increments an internal counter, and exits. Otherwise the process builds (at 707) a CFI by taking a snapshot of the populations that are identified for the natural evolution test. Next, the process activates (at 715) the natural evolution test. Details of the evolution test are not shown here but are shown elsewhere in this specification.
  • the process checks whether the natural evolution test indicates that the evolution is acceptable. If yes, the process resets (at 725) the criteria for performing the evolution test. The process then exits. Otherwise, the process sets (at 730) an internal flag to prevent the user to use the content that requires subscription to access. This internal flag is reset once the user synchs up the subscription. The process then exits.
  • Some embodiments perform several tests during the evolution test. Some embodiments perform individual as well of global tests. The individual tests include checking the evolution of the attributes of individual entities (files, folder, volumes, etc.) that have predictable behavior. If any (or a certain number) of these tests fail, the evolution test as a whole would fail.
  • the global tests include checking statistics for many entities in a population.
  • An example of a global test was described above in reference with snapshots 535 and 540 in Figure 5 .
  • Several global tests can be performed on different groups of entities in a population. If any (or a certain number) of these tests fail, the evolution test as a whole would fail.
  • Some embodiments perform a global evolution test for a set of entities by comparing a weighted computation (e.g., a weighted sum) of the changes in a set of attributes of the set of entities with a threshold to determine whether the set of entities passes the global evolution test.
  • a weighted computation e.g., a weighted sum
  • This weighted sum is then compared with a predetermined threshold. For some global tests, two thresholds may be used to compare the changes to a range with a lower and a higher acceptable threshold.
  • Figure 8 conceptually illustrates a process 800 that performs several different tests during one episode of evolution test. Although the example of Figure 8 is shown with three populations, the evolution test can be performed with any number of populations. Also, to better illustrate the concept of different tests performed, Figure 8 only shows the operations that determine whether each group of tests has passed. The other details of the evolution tests, such as the operations of performing the tests are not shown for simplicity.
  • the process checks whether the individual tests for the fast evolving population have passed. If these tests fail, the process proceeds to 840 to indicate that the evolution test has failed. The process then transitions to 845 which is further described below. Otherwise, the process checks (at 810) whether the global tests for the fast evolving tests have passed. If these tests fail, the process proceeds to 840 to indicate that the evolution test has failed.
  • the process checks (at 815) whether all individual tests for the medium evolving population have passed. If these tests fail, the process proceeds to 840 to indicate that the evolution test has failed. Otherwise, the process checks (at 820) whether the global tests for the medium evolving tests have passed. If these tests fail, the process proceeds to 840 to indicate that the evolution test has failed.
  • the process checks whether all individual tests for the slow evolving population have passed. If these tests fail, the process proceeds to 840 to indicate that the evolution test has failed. Otherwise, the process checks (at 830) whether the global tests for the slow evolving tests have passed. If these tests fail, the process proceeds to 840 to indicate that the evolution test has failed.
  • the process proceeds to 835 to indicate that the evolution test has passed.
  • the process saves (at 845) the current CFI to be used as the old snapshot when the evolution test is next performed.
  • the process then exits.
  • FIG. 9 conceptually illustrates a computer system with which some embodiments of the invention are implemented.
  • the computer system 900 includes a bus 905, a processor 910, a system memory 915, a read-only memory 920, a permanent storage device 925, input devices 930, and output devices 935.
  • the bus 905 collectively represents all system, peripheral, and chipset buses that support communication among internal devices of the computer system 900.
  • the bus 905 communicatively connects the processor 910 with the read-only memory 920, the system memory 915, and the permanent storage device 925.
  • the processor 910 retrieves instructions to execute and data to process in order to execute the processes of the invention.
  • the read-only-memory (ROM) 920 stores static data and instructions that are needed by the processor 910 and other modules of the computer system.
  • the permanent storage device 925 is a read-and-write memory device. This device is a non-volatile memory unit that stores instruction and data even when the computer system 900 is off. Some embodiments of the invention use a mass-storage device (such as a magnetic or optical disk and its corresponding disk drive) as the permanent storage device 925. Other embodiments use a removable storage device (such as a floppy disk or zip® disk, and its corresponding disk drive) as the permanent storage device.
  • the system memory 915 is a read-and-write memory device. However, unlike storage device 925, the system memory is a volatile read-and-write memory, such as a random access memory. The system memory stores some of the instructions and data that the processor needs at runtime.
  • Instructions and/or data needed to perform processes of some embodiments are stored in the system memory 915, the permanent storage device 925, the read-only memory 920, or any combination of the three.
  • the various memory units may contain instructions for processing multimedia items in accordance with some embodiments. From these various memory units, the processor 910 retrieves instructions to execute and data to process in order to execute the processes of some embodiments.
  • the bus 905 also connects to the input and output devices 930 and 935.
  • the input devices enable the user to communicate information and select commands to the computer system.
  • the input devices 930 include alphanumeric keyboards and cursor-controllers.
  • the output devices 935 display images generated by the computer system. For instance, these devices display IC design layouts.
  • the output devices include printers and display devices, such as cathode ray tubes (CRT) or liquid crystal displays (LCD).
  • bus 905 also couples computer 900 to a network 965 through a network adapter (not shown).
  • the computer can be a part of a network of computers (such as a local area network ("LAN”), a wide area network (“WAN”), or an Intranet) or a network of networks (such as the Internet).
  • LAN local area network
  • WAN wide area network
  • Intranet a network of networks
  • the Internet a network of networks
  • the life cycle analysis can be performed on any user device (such as personal computers, music players, video players, personal digital assistants, cameras, etc.) that is capable of running software to perform the life cycle analysis and has a set of files or other entities whose attributes can be acquired to do the test.
  • the life cycle analysis is not limited to the attributes and file categories shown in the examples above and can be practiced using other attributes and other user device entities to do the test.
  • the populations of entities in a user device need not be limited to the three mentioned in some examples above, as additional or fewer levels of granularity can be used.
  • the system, user, and application files and directories where shown as examples of the entities that have known or predictable behavior. Many other entities and populations may be identified for use in the evolution test.
  • the hardware profile of the user device is also used for the life cycle analysis.
  • entities local to the user device were used for the life cycle analysis, in some embodiments, entities in the user device environment including a local area network (LAN) or a wireless LAN (WLAN) are also considered.
  • LAN local area network
  • WLAN wireless LAN
  • the evolution test can be performed in user devices running different operating systems. These operating systems may have a different files and folder structure, a different nomenclature for their file structure, may have other attributes that can be monitored, etc. For instance, some operating systems may use the terms directories and sub-directories while others use the term folders and sub-folders. Also, the computer system shown in Figure 9 is just an example of many different hardware configurations that a user device can have. For instance, a portable media player may have a different hardware configuration than shown in Figure 9 .
  • the snapshots may be taken periodically and/or based on certain events e.g., whenever a user is trying to access a downloaded content or whenever a user has accessed a predetermined number of downloaded content.
  • the evolution test may not be performed at fixed time intervals. Instead, performing the evolution test may be based on the frequency of access to content that require subscription or on any other acceptable criteria determined by trial and error, heuristics, etc.

Abstract

Some embodiments provide a method for determining whether a subscription for using digital content on a user device has elapsed. The method compares a first collision free image of a first set of entities in the user device with a second collision free image for a second set of entities in the user device at a second instance in time. Based on the comparison, the method determines whether the subscription has elapsed.

Description

    FIELD OF THE INVENTION
  • The present invention relates to digital rights management systems and in particular to determining the validity of subscription to use digital content.
  • BACKGROUND OF THE INVENTION
  • The protection of digital content transferred between computers is fundamentally important for many enterprises today. Enterprises attempt to secure this protection by implementing some form of Digital Rights Management (DRM) process. DRM refers to a range of techniques that are used to control access to copyrighted content and to enforce the terms and conditions on which the digital content is made available to users. Digital content can be software, music, video, news clip, game, image, or any other content distributed in digital form. Parts of software to implement DRM may run on a server controlled or trusted by the content provider while other parts of the software may be loaded into the user computer either separately or as a part of a platform that allows the user to download and use the content.
  • Many models have been devised to distribute digital content. In some instances, certain content can be obtained or licensed free. In these instances, the DRM process simply enforces the distribution of content to authorized computers without considering any financial objectives. In other instances, an a la carte download model is used where a user pays a one-time fee to download a particular content. Depending on the terms of use, the user is granted unlimited use, use for a certain period of time, or use for a certain number of times.
  • Yet, in other instances, a subscription model is used where the user is required to pay a periodic subscription fee. In these instances, as long as the subscription is up-to-date, the user can download an agreed upon (sometimes unlimited) number of content files. The user can also use the content (e.g., listen to a downloaded music track, watch a downloaded movie, play a downloaded game, etc.) as long as the subscription is up-to-date. Therefore, in order to protect the content provider's rights, the DRM process has to be able to determine the validity of subscription when a user wants to use the content.
  • As long as the user is online, the DRM process can check the validity of the subscription by comparing the expiration time and date of the subscription with the time and date obtained from a trusted source. Once the user goes offline, however, the task of ensuring the validity of the subscription becomes more difficult. When the user is offline, the DRM has to rely on the usually untrusted source of time on the user device. In many operating environments such as Apple Mac OS X ® or Microsoft Windows ®, a user can easily change the user device system clock. For instance, in order to defeat a DRM system that solely relies on the user device system clock, the user can buy subscription for a limited time, download content, and continue using the downloaded content offline by changing the system clock back to a date and time when the subscription was still valid. There is, therefore, a need in the art to determine whether a user's subscription is still valid without solely relying on the user device clock, especially in environments where the user is not always connected to a DRM enforcing device.
  • SUMMARY OF THE INVENTION
  • Some embodiments provide a method for determining whether a subscription for using digital content on a user device has elapsed. The method compares a first collision free image of a first set of entities in the user device with a second collision free image for a second set of entities in the user device at a second instance in time. Based on the comparison, the method determines whether the subscription has elapsed.
  • In some embodiments, each collision free image includes a slow growth population of entities in the user device, a fast growth population of entities in the user device, and a medium growth population of entities in the user device. In other embodiments, each collision free image includes different types of populations and/or fewer or more types of populations.
  • In some embodiments, the comparison of the collision free images includes the comparison of a set of attributes of a set of entities in the user device to a set of acceptable operational parameters. In some embodiments, the comparison includes the computation and comparison of statistics calculated for a set of attributes of a set of entities in the user device. Some embodiments at least partly compute the statistics at the time of the generation of the collision free images and/or at the time of the comparison of the collision free images.
  • Some embodiments provide a digital rights management (DRM) method that compares information for a first set of attributes of the user device at a first instance in time with information of a second set of attributes at a second instance in time. Based on the comparison, the method determines whether the user device environment (e.g., the user device clock, files, directories, etc.) has been manipulated to circumvent DRM protection for accessing a set of content on the user device.
  • Some embodiments provide a method of distributing digital content. The method distributes content on subscription basis and uses an evolutionary algorithm to determine whether a subscription to use digital content has expired. The method determines whether a population of entities related to a user device has evolved from a previously sampled population. In some embodiments, the method selects the entities and their attributes from a current population based on their fitness, and modifies the selected entities to form a new population for evaluating an evolution for the next generation of said entities.
  • Some embodiments of the invention provide a digital rights management (DRM) method that (1) compares a first set of attributes of a device at a first instance in time with a second set of attributes at a second instance in time; and (2) based on the comparison, determines whether the device has been manipulated to circumvent DRM protection for accessing a set of content on the device.
  • The method may advantageously be complemented by the following features:
    • a plurality of the attributes are values associated with entities of the device;
    • a plurality of the attributes are statistics associated with a plurality of entities of the device;
    • the attributes comprise absence and presence of at least one entity in the device;
    • the attributes comprise attributes of files and directories of the device;
    • the attributes may also comprise at least one of size, creation date, last modification date, last access date, absence, and presence of the files and directories of the device;
    • the attributes comprise entities in a network connected to the device, where the network can be any network such as a wired network or a wireless network;
    • attributes comprise at least one of attribute associated with a hardware component of the device;
    • where the device attributes comprise attributes of an operating system of the device.
  • The method may also be complemented by the following features:
    • the device is manipulated when a clock in the device is improperly changed;
    • the device is manipulated when files and directories in the device are manipulated;
    • the device is manipulated when the device hardware configuration is manipulated.
  • The method may also be complemented by the following features:
    • requiring the device to synchronize with a remote computer after determining that the device has been manipulated.
  • The method may also be complemented by the following features:
    • comparing the sets of attributes comprises comparing values associated with entities of the device;
    • comparing the first and second sets of attributes comprises comparing statistics calculated for a plurality of entities;
    • comparing is based on predictable behavior of the first and second sets of attributes;
    • comparing comprises (1) identifying differences in the sets of attributes at the first and second instances in time, and (2) determining whether the differences are expected.
  • The method may also be complemented by the following features:
    • the first and second sets are identical;
    • the first and second sets do not share at least one attribute;
    • the device is a computer;
    • the device is a portable player.
  • The method may also be complemented by the following features:
    • the first set of attributes comprises a first collision free images of the first set of entities, where the second set of attributes comprises a second collision free images of the second set of entities;
    • each collision free image comprises a population of fast evolving entities in the device;
    • each collision free image comprises a population of slow evolving entities in the device;
    • each collision free image comprises a slow growth population of entities in the device, a fast growth population of entities in the device, and a medium growth population of entities in the device;
    • a collision free image comprises a set of attributes of each entity, where the comparison comprises comparing the attributes of the first set of entities with the attributes of the second set of entities;
    • a collision free image comprises a set of statistics associated with a plurality of entities, where the comparison comprises comparing statistics calculated for the plurality of entities;
    • the first and second sets of entities are selected so that the first and second collision free images are not identical.
  • Some embodiments also provide a computer readable medium storing a digital rights management (DRM) program for execution. This program comprises sets of instructions for (1) comparing a first set of attributes of a device at a first instance in time with a second set of attributes at a second instance in time; and (2) based on the comparison, determining whether the device has been manipulated to circumvent DRM protection for accessing a set of content on the device.
  • This computer readable medium may advantageously be complemented by the following features:
    • a plurality of the attributes are values associated with entities of the device;
    • a plurality of the attributes are statistics associated with a plurality of entities of the device;
    • the attributes comprise absence and presence of at least one entity in the device;
    • the attributes comprise attributes of files and directories of the device;
    • the attributes may also comprise at least one of size, creation date, last modification date, last access date, absence, and presence of the files and directories of the device;
    • the attributes comprise entities in a network connected to the device, where the network can be any network such as a wired network or a wireless network;
    • the attributes comprise at least one of attribute associated with a hardware component of the device;
    • the device attributes comprise attributes of an operating system of the device.
  • The computer readable medium may also be complemented by the following features:
    • the device is manipulated when a clock in the device is improperly changed;
    • the device is manipulated when files and directories in the device are manipulated;
    • the device is manipulated when the device hardware configuration is manipulated;
  • The computer readable medium may also be complemented by the following features:
    • a set of instructions for requiring the device to synchronize with a remote computer after determining that the device has been manipulated.
  • The computer readable medium may also be complemented by the following features:
    • the set of instructions for comparing the sets of attributes comprises a set of instructions for comparing values associated with entities of the device;
    • the set of instructions for comparing the first and second sets of attributes comprises a set of instructions comparing statistics calculated for a plurality of entities;
    • the set of instructions for comparing is based on predictable behavior of the first and second sets of attributes;
    • the set of instructions comparing comprises sets of instructions for (1) identifying differences in the sets of attributes at the first and second instances in time, and (2) determining whether the differences are expected.
  • The computer readable medium may also be complemented by the following features:
    • the first and second sets are identical;
    • the first and second sets do not share at least one attribute;
    • the device is a computer;
    • the device is a portable player.
  • The computer readable medium may also be complemented by the following features:
    • the first set of attributes comprises a first collision free images of the first set of entities, where the second set of attributes comprises a second collision free images of the second set of entities;
    • each collision free image comprises a population of fast evolving entities in the device;
    • each collision free image comprises a population of slow evolving entities in the device;
    • each collision free image comprises a slow growth population of entities in the device, a fast growth population of entities in the device, and a medium growth population of entities in the device;
    • a collision free image comprises a set of attributes of each entity, where the the set of instructions for comparing comprises a set of instructions for comparing the attributes of the first set of entities with the attributes of the second set of entities;
    • a collision free image comprises a set of statistics associated with a plurality of entities, where the set of instructions for comparing comprises a set of instructions for comparing statistics calculated for the plurality of entities;
    • the first and second sets of entities are selected so that the first and second collision free images are not identical.
  • Some embodiments of the invention provide a method for determining whether a subscription for using content on a device has elapsed. This method (1) compares a first collision free image of a first set of entities in the device at a first instance in time with a second collision free image of a second set of entities in the device at a second instance in time; and (2) based on the comparison, determines whether the subscription has elapsed.
  • Some embodiments of the invention provide a computer readable medium that stores program for execution. The program determines whether a subscription for using content on a device has elapsed. The program comprises sets of instructions for (1) comparing a first collision free image of a first set of entities in the device at a first instance in time with a second collision free image of a second set of entities in the device at a second instance in time; and (2) based on the comparison, determining whether the subscription has elapsed.
  • The computer readable medium may also be complemented by the following features:
    • each collision free image comprises a population of fast evolving entities in the device;
    • each collision free image comprises a population of slow evolving entities in the device;
    • each collision free image comprises a slow growth population of entities in the device, a fast growth population of entities in the device, and a medium growth population of entities in the device;
    • a collision free image comprises a set of attributes of each entity, wherein the set of instructions for comparing comprises a set of instructions for comparing the attributes of the first set of entities with the attributes of the second set of entities;
    • a collision free image comprises a set of statistics associated with a plurality of entities, wherein the the set of instructions for comparing comprises a set of instructions for comparing statistics calculated for the plurality of entities;
    • the statistics are at least partly calculated at the time of the generation of the collision free images;
    • the statistics are at least partly calculated at the time of the comparison of the collision free images;
    • the first and second sets of entities are identical;
    • the first and second sets of entities are not identical;
    • the entities comprise files and directories of the device;
    • the entities comprise hardware configuration of the device;
    • the device attributes comprise attributes of an operating system of the device;
    • attributes comprise entities in a network connected to the device, where the network can be any network such as a wired network and a wireless network;
    • the first and second sets of entities are selected so that the first and second collision free images are not identical.
  • Some embodiments of the invention provide a method that (1) receives content on subscription basis, and (2) uses an evolutionary process to determine whether a subscription to use content has expired.
  • Some embodiments also provide a computer readable medium that stores a program for execution. The program comprises sets of instructions for (1) receiving content on subscription basis, and (2) using an evolutionary process to determine whether a subscription to use content has expired.
  • This computer readable medium may advantageously be complemented by the following features:
    • the set of instructions for using the evolutionary process comprises a set of instructions for determining whether a population of entities related to a device has evolved from a previously sampled population; the program further comprises a set of instructions for specifying a possibility that the subscription has expired where when a population has not evolved from a previously sampled population;
    • the entities and a set of attributes of the entities are selected from a current population based on a set of criteria, where the selected entities are modified to form a new population for evaluating an evolution for a next generation of the entities.
  • Some embodiments of the invention also provide a method that (1) receives a request regarding status of a subscription for using content on a remote device, (2) determines whether the subscription is valid, and (3) generates a response to the request regarding the status of subscription.
  • This method may advantageously be complemented by the following features:
    • the request is received when the remote device determines based on an evolutionary algorithm that the subscription may have expired;
    • the evolutionary algorithm specifies a possible tampering with the remote device to access at least a piece of content based on the subscription;
    • the request is received when an unexpected change occurs for at least one entity on the remote device;
    • generating the response to the request updates the subscription status on the remote device;
    • the remote device is a computer;
    • the remote device is a portable media player.
  • The method may advantageously be complemented by the following features:
    • allowing the subscription to be renewed when the subscription is not valid;
    • allowing downloading content to the remote devic; when the subscription is valid;
    • determining whether the subscription is valid comprises using a trusted source of time.
  • Some embodiments of the invention provide a computer readable medium storing a program for execution. The program (1) receives a request regarding status of a subscription for using content on a remote device; (2) determines whether the subscription is valid; and (3) generates a response to the request regarding the status of subscription.
  • The computer readable medium may advantageously be complemented by the following features:
    • the request is received when the remote device determines based on an evolutionary algorithm that the subscription may have expired;
    • the request is received when an unexpected change occurs for at least one entity on the remote device;
    • the evolutionary algorithm specifies a possible tampering with the remote device to access at least a piece of content based on the subscription;
    • generating the response to the request updates the subscription status on the remote device;
    • the remote device is a computer;
    • the remote device is a player.
    Some embodiments of the invention provides a device that comprises (1) content; (2) a plurality of entities; and (3) an internal data storage storing a plurality of attributes for a group of entities, wherein at least two sets of attributes are from two different instances of time, the two sets of attributes for use by an evolutionary process to determine whether the device has been manipulated to circumvent digital rights management (DRM) protection for accessing content on the device.
  • The device may advantageously be complemented by the following features:
    • the two sets of attributes have predictable behavior;
    • the attributes comprise absent and present of at least one entity in the device;
    • the attributes comprise attributes of files and directories of the device;
    • the attributes comprise at least one of size, creation date, last modification date, last access date, absence, and presence of the files and directories of the device;
    • the attributes comprise attributes of an operating system of the device;
    • the attributes comprise entities in a network connected to the device, where the network can be any network such as a wired network or a wireless network;
    • the device is manipulated when a clock in the device is improperly changed;
    • the device is manipulated when files and directories in the device are manipulated;
    • the device is manipulated when the device hardware configuration is manipulated;
    • the device is a portable player;
    • the device is a computer.
  • Some embodiments of the invention provide a device for accessing content. The device comprises (1) a storage for storing content; (2) a plurality of entities; and (3) an electronic component for determining whether a subscription to access content on the device has expired based on the change over time of a plurality of attributes of a plurality of entities.
  • This device may advantageously be complemented by the following features:
    • the electronic component determines the subscription has expired when the change over time of at least one attributes is slower than an expected rate;
    • the electronic component determines that the subscription has expired when the change over time of at least one attribute is faster than an expected rate;
    • the plurality of entities are stored on the storage;
    • the plurality of entities comprises at least one hardware component;
    • the device is a computer;
    • the device is a portable player.
  • The device may also advantageously be complemented by the following features:
    • a read-memory for storing sets of instructions for (1) identifying two copies of the attributes at two instances of time; and (2) determining a time for renewing the subscription has expired when at least one attribute has not changed as expected between the two instances of time.
  • Some embodiments of the invention provide a method that (1) identifies a particular device environment in which a plurality of contents will be accessed; (2) identifies a set of entities on the particular device environment that have attributes with predictable behaviors; and (3) defines a digital rights management (DRM) process for use during a runtime of a device, where the DRM process is for determining whether the changes to attributes of each entity is as predicted.
  • The method may advantageously be complemented by the following features:
    • the particular device environment comprises a set of files on the device;
    • the particular device environment comprises a set of directories on the device;
    • the particular device environment comprises an operating system software;
    • the particular device environment comprises a network the device will be connected;
    • the particular device environment comprises a hardware configuration of the device;
    • the attributes with predictable behaviors are determined by trial and error;
    • the attributes with predictable behaviors are determined by using heuristics;
    • the attributes with predictable behaviors are determined by studying system documents of the particular device environment;
    • the device comprising the particular device environment is a computer;
    • the device comprising the particular device environment is a portable player.
  • Some embodiments of the invention provide a computer readable medium storing a program for execution. The program comprises sets of instructions for (1) analyzing attributes of a set of entities on a device at different instances in time when a trusted source of time is not available; and (2) allowing access to the digital media when the attributes have changed within expected thresholds.
  • This computer readable medium may advantageously be complemented by the following features:
    • the program further comprises a set of instructions for requiring the device to synchronize a subscription to use the digital media by communicatively connecting to a remote computer with a trusted source of time;
    • the program further comprises a set of instructions for estimating time elapsed between different instances of time by analyzing changes in the attributes.
    BRIEF DESCRIPTION OF THE DRAWINGS
  • The novel features of the invention are set forth in the appended claims. However, for purpose of explanation, several embodiments are set forth in the following figures.
    • Figure 1 illustrates a digital-content distribution system of some embodiments.
    • Figure 2 illustrates subscription renewal process of some embodiments.
    • Figure 3 illustrates a process for subscription validity checking with the life cycle analysis in some embodiments.
    • Figure 4 conceptually illustrates a collision free image that is a snapshot of several populations of files.
    • Figure 5 illustrates examples of two collision free images generated at two different times.
    • Figure 6 illustrates a process for building the collision free image used during the natural evolution test in some embodiment.
    • Figure 7 illustrates a process used in some embodiments to determine if the natural evolution test is required.
    • Figure 8 illustrates different tests performed during the natural evolution test in some embodiments.
    • Figure 9 conceptually illustrates a computer system with which some embodiments are implemented.
    DETAILED DESCRIPTION OF THE INVENTION
  • In the following description, numerous details are set forth for the purpose of explanation. However, one of ordinary skill in the art will realize that the invention may be practiced without the use of these specific details. In other instances, well-known structures and devices are shown in block diagram form in order not to obscure the description of the invention with unnecessary detail.
  • Some embodiments provide a method for determining whether a subscription for using digital content on a user device has elapsed. The method compares a first collision free image of a first set of entities in the user device with a second collision free image for a second set of entities in the user device at a second instance in time. Based on the comparison, the method determines whether the subscription has elapsed.
  • In some embodiments, each collision free image includes a slow growth population of entities in the user device, a fast growth population of entities in the user device, and a medium growth population of entities in the user device. In other embodiments, each collision free image includes different types of populations and/or fewer or more types of populations.
  • In some embodiments, the comparison of the collision free images includes the comparison of a set of attributes of a set of entities in the user device to a set of acceptable operational parameters. In some embodiments, the comparison includes the computation and comparison of statistics calculated for a set of attributes of a set of entities in the user device. Some embodiments at least partly compute the statistics at the time of the generation of the collision free images and/or at the time of the comparison of the collision free images.
  • Some embodiments provide a digital rights management (DRM) method that compares information for a first set of attributes of the user device at a first instance in time with information of a second set of attributes at a second instance in time. Based on the comparison, the method determines whether the user device environment (e.g., the user device clock, files, directories, etc.) has been manipulated to circumvent DRM protection for accessing a set of content on the user device.
  • Some embodiments provide a method of distributing digital content. The method distributes content on subscription basis and uses an evolutionary algorithm to determine whether a subscription to use digital content has expired. The method determines whether a population of entities related to a user device has evolved from a previously sampled population. In some embodiments, the method selects the entities and their attributes from a current population based on their fitness, and modifies the selected entities to form a new population for evaluating an evolution for the next generation of said entities.
  • Several more detailed embodiments of the invention are described in sections below. Section I provides an overview of the content-distribution system of some embodiments. This discussion is followed by a discussion of a subscription model used by some embodiments in Section II. Next, Section III describes life cycle analysis that some embodiments use to test the validity of a user subscription. Last, Section IV describes a computer system used by some embodiments of this invention.
  • I. OVERVIEW
  • Figure 1 illustrates a content-distribution system 100 of some embodiments. This content-distribution system distributes content in a manner that protects the digital rights (i.e., ensures the legal use) of the content. As shown in Figure 1 , the content-distribution system 100 includes a DRM server set 110 and a content-receiving user device 115. Although only one user device 115 is shown in Figure 1 , the content-distribution system 100 can serve many user devices. Figure 1 illustrates the user device 115 as a portable computer. However, the user device 115 can be a desktop computer, a personal digital assistance (PDA), an audio player, a video player, or any other user device capable of receiving content online. The user device 115 connects to the DRM server set 110 through a computer network 120, such as a local area network, a wide area network, a network of networks (e.g., the Internet), etc.
  • Through the network connection, the user device 115 communicates with the set of DRM servers 110 to purchase, license, update, or otherwise obtain content in some embodiments. Accordingly, while in some embodiments, the DRM server set 110 sells or licenses content to user devices, this set in other embodiments does not sell or license the content. For instance, in some embodiments, the DRM server set 110 simply enforces the distribution of content to authorized user devices without having any financial objectives.
  • In some embodiments, the DRM server set 110 includes a content caching server that provides encrypted content to a user device 115 through the network 120, after another server in the DRM server set 110 determines that the user device 115 can obtain content. In some embodiments, the system 100 uses multiple caching servers to cache content at various locations on the network, in order to improve the speed and efficiency of downloading content across the network.
  • In some embodiments, the downloaded content can be copied from the user device 115 into one or more other user devices. For instance, Figure 1 illustrates the other user device as a portable media player 125. The portable media player can be any device capable of utilizing the downloaded content. For instance, the portable player could be a music player, a video player, a game box, a camera, etc. In some embodiments, the portable media player can be connected to the user device 115 via a connection such as a Universal Serial Bus (USB), IEEE 1394, infrared, wireless connection, or any other connections known in the art.
  • Many models have been devised to distribute digital content. In some instances, certain content can be obtained or licensed free. In these instances, the DRM server 110 simply enforces the distribution of content to authorized computers without considering any financial objectives. In other instances, an a la carte download model is used where a user pays a one-time fee to download a particular content. Depending on the terms of use, the user is granted unlimited use, use for a certain period of time, or use for a certain number of times.
  • Yet, in other instances, a subscription model is used where the user is required to pay a periodic subscription fee. In these instances, as long as the subscription is up-to-date, the user can download an agreed upon (sometimes unlimited) number of content files. The user can also use the content (e.g., listen to a downloaded music track, watch a downloaded movie, play a downloaded game, etc.) as long as the subscription is up-to-date. Therefore, in order to protect the content provider's rights, the DRM process has to be able to determine the validity of subscription when a user wants to use the content.
  • As long as the user is online, the DRM server set 110 of some embodiments can check the validity of the subscription by comparing the expiration time and/or date of the subscription with the time and/or date obtained from a trusted source. Once the user goes offline, however, the task of ensuring the validity of the subscription relies on the life cycle analysis of some embodiments. Some embodiments rely on the life cycle analysis to determine the validity of a user's subscription even when the user device 115 is connected to the DRM server set 110 directly or through another user device.
  • II. SUBSCRIPTION MODEL A. Subscription Renewal
  • As described above, subscription model is used in some content-distribution systems. In order for the owner of the content to be fairly compensated, a process for ensuring the validity of the subscription is required. Figure 2 conceptually illustrates a subscription renewal process of some embodiments. As shown in Figure 2 , after the user goes online (at 205), the process determines (at 210) whether the user has no subscription or has an expired subscription.
  • If the user has a valid subscription, the process proceeds to 220 which is described below. On the other hand, if the user does not have a valid subscription, the process guides the user (at 215) to buy or renew subscription for a period of time. Next (at 220), the process updates the user subscription information on the user device 115. At this point, the subscription information on the user device 115 is synchronized with the information on the DRM server 110. As long as the user has a valid subscription, the user can download (at 225) the agreed upon number of content into the user device 115. While the user is online, some embodiments verify the validity of the subscription by using a trusted source of time. After the user goes offline (at 230), however, the DRM module running on the user device uses the life cycle analysis of some embodiments to make sure the subscription to use the digital content has not expired.
  • B. Subscription Validity Check with the Life Cycle Analysis
  • In order to determine whether the time indicated by the user device has been tampered with or whether the user environment has been maliciously manipulated, some embodiments implement a technique to perform a life cycle analysis on the user device. The life cycle analysis can be performed both on a user device (e.g., user device 115) that directly connects to the DRM server set through the network as well as a user device (e.g., the user device 125) that connects to the DRM server set through other user devices.
  • The life cycle analysis is performed on a user device by the user device. To perform the life cycle analysis, several groups of files, file folders, directories, volumes, or any other user device entities with known or predictable behaviors are selected and analyzed. Periodically, a snapshot of certain attributes of these entities (e.g., last access date of a file, creation date of a file, size of a folder, etc.) are taken and saved. Some embodiments calculate statistics for some the attributes and save these calculations. The evolution of these populations, for instance changes in the attributes as well as absence or presence of certain files or directories, is then analyzed to determine whether the observed changes between two snapshots correlate to the elapsed time indicated by the user device system clock.
  • Figure 3 conceptually illustrates the subscription validity checking process 300 of some embodiments. At 305, the process determines that the user wants to use a downloaded content based on the subscription model. For instance, the user might want to listen to a music track, watch a movie, read an article, watch an image, play a game, etc. At 310, the process uses the user device's clock to check if the subscription has expired. If the subscription has expired based on the user clock, the user is requested (at 315) to go online and renew the subscription. Otherwise, the process uses (at 320) a natural evolution test to determine whether the user device clock may have been changed or the user device environment has been manipulated. The details of the natural evolution test are described in the following sections.
  • If the evolution test determines (at 320) that the user device environment has been manipulated or the user device clock is not reliable (and therefore, the subscription might have expired), the user is requested (at 325) to go online and synch up the subscription with the DRM server set 110. Otherwise, if at 330, the evolution test determines a normal evolution, the user is allowed to use the downloaded content that was obtained through the user's subscription. In some embodiment, the evolution test is done concurrently with the user using the content. In these embodiments (not shown), the user is requested to synch up after the current content is used by the user. In other embodiments, the user is prevented to use the downloaded content until the user synchs up with the DRM server 110.
  • In the following discussions, the life cycle analysis is described by using several examples. A person of ordinary skill in the art would, however, realize that the invention may be practiced without the use of these specific details. For instance, the life cycle analysis can be performed on any user device (such as personal computers, music players, video players, personal digital assistants, cameras, etc.) that is capable of running software to perform the life cycle analysis and has a set of files or other entities whose attributes can be acquired to do the analysis. Also, the life cycle analysis is not limited to the attributes and file categories shown in the examples and can be practiced using other attributes and other user device entities to do the analysis.
  • III. NATURAL EVOLUTION TEST
  • In some embodiments, the life cycle analysis includes a natural evolution test. The natural evolution test is performed by comparing the current snapshot of a population attributes with a previous snapshot of the population attributes to determine of the changes are acceptable. The natural evolution test also ensures that the rest of the user environment has not been modified to mislead the life cycle analysis. Based on the comparison of the current snapshot with the previous snapshot, the natural evolution test determines whether the user device environment has been manipulated to circumvent DRM protection for accessing content on the user device.
  • As described further below, the populations and their attributes to monitor are selected in a way that no two snapshots can be the same. Each snapshot, therefore, generates a collision free image (CFI) for the selected populations. Some embodiments save certain attributes of the selected populations in the CFI. Some embodiments calculate statistics of certain attributes of different populations and save the statistics in the CFI. In some embodiments, the CFI contains a combination of individual attributes of some population members (e.g., certain attributes of particular files, folders, volumes, etc. that have known behavior) as well as statistics of portions populations as a whole (e.g., average or total size of all files in a certain population). In some embodiments, the CFI also contains name and/or location information to identify each population and its members.
  • A. The Collision Free Image (CFI) 1. Selection of populations and attributes
  • Some embodiments take snapshots of certain population of files, folders, directories, volumes, or any other entities of a user device hardware or software that has known or predictable behavior and save their attributes (or statistics of those attributes) into a collision free image (CFI). In some embodiments, each snapshot creates a separate CFI.
  • Selection of these populations (to generate the CFI) depends on the particular user device. Some embodiments make the selection based on the user device environment, e.g., the particular operating system running on the user device, applications running on the user device, as well as the user device hardware configuration. During the development phase of the software that implements the life cycle analysis, the structure, type, attributes, and behaviors of each population are carefully analyzed to determine a set of entities (such as files, folders, directories, volumes, hardware profiles, etc.) with predictable behavior.
  • Heuristics, trial and errors, as well as study of system description documents and development guides may be used to identify a set of device entities and their specific attributes to be used in the life cycle analysis. Some embodiments identify different groups of entities with similar behavior and make a population from them. For instance, some embodiments identify slow, medium, and fast evolving entities in a user device and allocate them to different populations.
  • The populations in the user device are analogous to human population. Some human populations, e.g., tribes living in remote areas, change very slowly. In a certain period of time, these tribes have very few people coming and going and have very few births and deaths. On the other hand, in large metropolitan areas, people come and go all the time and there are fairly large number of births and deaths. There are yet other cities or localities with moderate evolutions.
  • Accordingly, some embodiments analyze three types of populations to create a snapshot of slow evolving population, medium evolving population, and fast evolving population. A person of ordinary skill in the art would realize that the populations of entities in a user device need not be limited to the three mentioned in above example, as additional or fewer levels of granularity can be used. Some of the examples given below, however, use the three categories of slow, medium, and fast evolving population for simplicity.
  • The natural evolution test of some embodiments implements a genetic algorithm that determines whether a population of entities related to the user device (i.e., entities in the user device or entities in the user device environment, e.g., entities in a local area network connected to the user device) has evolved from a previously sampled population. Genetic algorithms are a particular class of evolutionary algorithms that use techniques inspired by Darwin's theory of evolution such as inheritance, mutation, natural selection, and recombination.
  • The natural evolution test of these embodiments starts with a certain population. The evolution starts from the first set of entities in the population and evolves in generations. In each generation, the whole population is evaluated to determine if the evolution is reflective of the elapsed time indicated by the user device. In some embodiments, entities and their attributes are selected from the current population based on their fitness, modified (i.e., mutated or recombined) to form a new population for evaluating the evolution of the next generation.
  • Figure 4 conceptually illustrates a CFI 400 that includes a snapshot of three types of populations 405-415 in a user device. Comparing to human tribes, these populations may be slow evolving, fast evolving or somewhere in between. For instance, in some operating systems, system files and directories make a large population. Although the population may have many members, the population is static except for the last access dates of population members. The user may frequently use the system entities but seldom upgrade or update them.
  • On the other hand, user files and directories may be a large population with fast evolution. On a daily basis, a user may surf the Internet and add cookies and download files. The user may edit, modify, create, and delete files and directories in the user area. Another example of a population may be a group of applications. In some embodiments, the application files may make a small population that is mainly static. A person of ordinary skill in the art would realize that system, user, and application files and directories are just examples of the entities that have known or predictable behavior.
  • Once different population and their relevant attributes are determined, heuristics and trial and errors would be used to determine a proper frequency with which snapshots of the populations and their attributes should be taken. The snapshots should be taken with such a frequency to identify expected changes in a user device. For instance, Figure 5 illustrates an example of two snapshots 505 and 510 of a system taken approximately two days apart. In this figure, the numbers are hypothetical and are used as an example only.
  • As shown in Figure 5 , the file "WindowsUpdate.log" located in the folder "C:\WINDOWS" is in both CFI (snapshots) 505 and 510. The two snapshots 515 and 520 of this file show that the size of this file has increased from 1,650 kilo bytes (KB) to 1,860 KB in the time the two snapshots were taken. As shown, the "Date Modified" and "Date Accessed" attributes have also changed while the "date Created" attribute has not changed.
  • Whether or not the two snapshots of this file would pass the evolution test, depends on how the evolution heuristics had expected this file to evolve in the time between the two snapshots. Based on the heuristics, trial and error, information in different system and manufacturer documents, the evolution test would have a predetermined change threshold for different attributes of this file.
  • For instance, lets assume that based on experimentations, the life cycle analysis has determined that the size of this specific file (which is a system log file) should change by at least 10 kilo bytes (KB) a day and it should be accessed and modified at least once a day. The creation date of the file, however, should not change. Under these assumptions, this specific file would pass the evolution test. Nothing unexpected is detected for this file during the period of approximately two days indicated by the user device clock. On the other hand, if the life cycle analysis had determined that the size of the file should change by at least 150 KB a day, the file would not have passed the evolution test.
  • The file Acrobat.exe shown in Figure 5 is another example of a file for which two snapshots 525 and 530 are taken. As shown, this file is located in "C:\Program Files\Adobe\Acrobat 5.0" folder. Let's assume that this is an application file and evolution test does not expect it to change except for the "Date Accessed". As shown in the example, however, the "Date Accessed" attribute of the snapshot taken on 4/3/2006 at 8:56 pm shows a last accessed date of 4/5/2006 at 5:48 PM. This will be an indication to the evolution test that the user device clock that indicates the time of the last snapshot to be 4/3/2006 at 8:56 PM may not have been correct. As was shown in step 325 in Figure 3 , the user will be requested to go online and synch up his/her subscription.
  • As described above, in some embodiments, the CFI can also contain statistics for all or portions of different populations. The conceptual example shown in Figure 5 is the two snapshots 535 and 540 taken for a group of folders that contain cookies for different users. In some operating systems, several users may have access to a particular user device and each user may have his/her own assigned area of the memory space (e.g., hard disk) for receiving the cookies downloaded to the hard disk while the user is surfing the Internet. In the example shown in 535 and 540 snapshots, the CFI contains statistics about many or all folders in the hard disk that contain user cookies. In other embodiments, not shown, individual folders containing cookies for individual users may be monitored.
  • As shown, the two snapshots 535 and 540 show that the total size of this population has increased from 147,618 bytes to 168,618 bytes between the two snapshots. Also, the number of objects in the population has changed from 99 to 120. The example also shows that the earliest creation date, the last modification date, and the last access date of the population are also being monitored. As shown, the last "Date Modified" and last "Date Accessed" attributes have changed between the snapshots while the earliest "Date Created" has not changed.
  • Whether or not the two snapshots 535 and 540 would pass the evolution test, depends on how the life cycle analysis heuristics had expected this population to evolve in the two days, one hour, and 24 minutes elapsed time that the user device clock shows between the two snapshot. As shown the first snapshot was taken on 4/1/2006 at 7:32 PM and the second snapshot was taken on 4/3/2006 at 8:56 PM. Based on the heuristic, trial and error, information in different system and manufacturer documents, the evolution test would have a predetermined change threshold for different attributes of this population.
  • For instance, lets assume that based on experimentations, the life cycle analysis determines that the size of a specific population that contains cookies should change by at least 5 KB a day but not more than 20 KB a day. Also, let's assume that the life cycle analysis expects that there should at least be 5 new cookies per day, the population should be modified and/or accessed at least once a day and the earliest creation date should not change. Under these assumptions, the two snapshots 535 and 540 would pass the evolution test. There is nothing unexpected that is detected in this population during the period indicated by the user device clock. On the other hand, if the life cycle analysis heuristics had determined that the size of the population should change by at least 15 KB a day, or there should be at least 20 objects a day added to the population, the population would not have passed the evolution test.
  • The above examples were given using a Microsoft Windows XP Professional ® operating system. A person of ordinary skill in the art would realize that other operating systems may have a different files and folder structure, a different nomenclature for their file structure, may have other attributes that can be monitored, etc. In addition, the snapshots may be taken periodically and/or based on certain events (e.g., whenever a user is trying to access a downloaded content or whenever a user has accessed a predetermined number of downloaded content). Also, the thresholds used by the evolution test may have a different granularity than a day or even a certain time period. The thresholds may be based on frequency of access to downloaded content or any other acceptable criteria determined by trial and error, heuristics, etc.
  • 2. Building the CFI
  • Figure 6 illustrates a process 600 for building a collision free image in some embodiments. During the development phase of the life cycle analysis software, some embodiments identify several populations for each type of user device environment. During run-time, the life cycle analysis process selects the populations that are identified for the particular user device type. In some embodiments, the population members are selected before each snapshot is taken. In other embodiments, the population members are selected less frequently.
  • As shown, the process initially identifies (at 605) a fast evolving population on the user device. The process gets (at 610) information from the user device about the attributes of the population members. As indicated above, examples of some attributes are size, creation date, last modification data, last access date, absence or presence of certain files or directories, etc. In some embodiments, selected attributes of environment in which the user device operates are also included in the CFI. A person of ordinary skill in the art would realize that other attributes may also be used without deviating from the teachings of the invention. The process then saves (at 610) the information in the CFI. The saved information can be the current values of selected attributes of particular files or folders or other entities. The saved information can also be in the form of statistics calculated for certain members of the population. For instance, the statistics may include average, maximum, minimum, mean, standard deviation, or any other statistics calculated for a portion or all members of the population.
  • Similarly, the process identifies (at 615) a population of medium evolving device entities. At 620, the process gets information from the user device about the attributes of the population members and adds it to the CFI. Similarly, the process identifies (at 625) a population of slow evolving device entities. The process then gets information (at 630) from the user device about the attributes of the population members and adds the information to the CFI. Although the process 600 is shown to identify and collect information for three types of populations, the evolution test is neither limited to three populations nor the populations are solely selection based on how fast they evolve. Therefore, the process 600 may identify several populations based on criteria determined during the development of the evolution phase for the particular user device and use those populations to generate the CFI.
  • B. Determining if the Evolution Test is Required
  • In some embodiments, the evolution test is not performed every time a user accesses downloaded content. Different embodiments use different criteria for determining whether the evolution test needs to be performed. For instance, some embodiments may perform the evolution test once out of several times a user accesses any content, once out of several times a user accesses a particular content, randomly, or by any other criteria that is determined during the evolution test development. Some embodiments may use a combination of several criteria to determine whether the evolution test has to be performed. Also as described below, once the evolution test has determined that the user needs to synchronize the subscription, some embodiments set an internal flag that prevents the user to access the content without performing any further evolution tests until the subscription is synchronized.
  • Figure 7 illustrates a process 700 that some embodiments utilize to determine whether the evolution test has to be performed. The process is activated when there may be a need to perform the evolution test. For instance, referring to Figure 3 , the process 700 of some embodiments may be activated before operation 320 is performed. Therefore, in these embodiments, operation 320 (and operation 325 if needed) will only be performed if the process 700 determines that evolution test has to be performed.
  • As shown in Figure 7 , the process determines (at 705) whether the criteria to perform the evolution test have been satisfied. For instance, if in a particular embodiment, the evolution test is performed every 10 times that the user accesses content that require subscription, the process checks whether the user has already accessed the content at least ten times. If the criteria are not satisfied, the process at 710 updates the criteria, e.g., increments an internal counter, and exits. Otherwise the process builds (at 707) a CFI by taking a snapshot of the populations that are identified for the natural evolution test. Next, the process activates (at 715) the natural evolution test. Details of the evolution test are not shown here but are shown elsewhere in this specification.
  • At 720, the process checks whether the natural evolution test indicates that the evolution is acceptable. If yes, the process resets (at 725) the criteria for performing the evolution test. The process then exits. Otherwise, the process sets (at 730) an internal flag to prevent the user to use the content that requires subscription to access. This internal flag is reset once the user synchs up the subscription. The process then exits.
  • C. Type of Tests Performed
  • Some embodiments perform several tests during the evolution test. Some embodiments perform individual as well of global tests. The individual tests include checking the evolution of the attributes of individual entities (files, folder, volumes, etc.) that have predictable behavior. If any (or a certain number) of these tests fail, the evolution test as a whole would fail.
  • The global tests include checking statistics for many entities in a population. An example of a global test was described above in reference with snapshots 535 and 540 in Figure 5 . Several global tests can be performed on different groups of entities in a population. If any (or a certain number) of these tests fail, the evolution test as a whole would fail. Some embodiments perform a global evolution test for a set of entities by comparing a weighted computation (e.g., a weighted sum) of the changes in a set of attributes of the set of entities with a threshold to determine whether the set of entities passes the global evolution test. For instance, the following equation (A) shows a weighted sum of the changes in the set of n attributes (size of files, directories, etc.) of a set of entities: i = 1 n w i * Δ i
    Figure imgb0001
    where n is the number of attributes of the set of entities, Δ i is the amount the ith attribute changed and wi is the weight given to the change of the ith attribute. This weighted sum is then compared with a predetermined threshold. For some global tests, two thresholds may be used to compare the changes to a range with a lower and a higher acceptable threshold.
  • Figure 8 conceptually illustrates a process 800 that performs several different tests during one episode of evolution test. Although the example of Figure 8 is shown with three populations, the evolution test can be performed with any number of populations. Also, to better illustrate the concept of different tests performed, Figure 8 only shows the operations that determine whether each group of tests has passed. The other details of the evolution tests, such as the operations of performing the tests are not shown for simplicity.
  • At 805, the process checks whether the individual tests for the fast evolving population have passed. If these tests fail, the process proceeds to 840 to indicate that the evolution test has failed. The process then transitions to 845 which is further described below. Otherwise, the process checks (at 810) whether the global tests for the fast evolving tests have passed. If these tests fail, the process proceeds to 840 to indicate that the evolution test has failed.
  • Otherwise, the process checks (at 815) whether all individual tests for the medium evolving population have passed. If these tests fail, the process proceeds to 840 to indicate that the evolution test has failed. Otherwise, the process checks (at 820) whether the global tests for the medium evolving tests have passed. If these tests fail, the process proceeds to 840 to indicate that the evolution test has failed.
  • Otherwise, at 825 the process checks whether all individual tests for the slow evolving population have passed. If these tests fail, the process proceeds to 840 to indicate that the evolution test has failed. Otherwise, the process checks (at 830) whether the global tests for the slow evolving tests have passed. If these tests fail, the process proceeds to 840 to indicate that the evolution test has failed.
  • Finally, if all tests have passed, the process proceeds to 835 to indicate that the evolution test has passed. The process saves (at 845) the current CFI to be used as the old snapshot when the evolution test is next performed. The process then exits. Although the example in Figure 8 shows that both individual tests and global tests are performed for each population, in some embodiments, for certain populations the tests may be limited to either individual or global tests.
  • IV. COMPUTER SYSTEM
  • Figure 9 conceptually illustrates a computer system with which some embodiments of the invention are implemented. The computer system 900 includes a bus 905, a processor 910, a system memory 915, a read-only memory 920, a permanent storage device 925, input devices 930, and output devices 935.
  • The bus 905 collectively represents all system, peripheral, and chipset buses that support communication among internal devices of the computer system 900. For instance, the bus 905 communicatively connects the processor 910 with the read-only memory 920, the system memory 915, and the permanent storage device 925.
  • From these various memory units, the processor 910 retrieves instructions to execute and data to process in order to execute the processes of the invention. The read-only-memory (ROM) 920 stores static data and instructions that are needed by the processor 910 and other modules of the computer system. The permanent storage device 925, on the other hand, is a read-and-write memory device. This device is a non-volatile memory unit that stores instruction and data even when the computer system 900 is off. Some embodiments of the invention use a mass-storage device (such as a magnetic or optical disk and its corresponding disk drive) as the permanent storage device 925. Other embodiments use a removable storage device (such as a floppy disk or zip® disk, and its corresponding disk drive) as the permanent storage device.
  • Like the permanent storage device 925, the system memory 915 is a read-and-write memory device. However, unlike storage device 925, the system memory is a volatile read-and-write memory, such as a random access memory. The system memory stores some of the instructions and data that the processor needs at runtime.
  • Instructions and/or data needed to perform processes of some embodiments are stored in the system memory 915, the permanent storage device 925, the read-only memory 920, or any combination of the three. For example, the various memory units may contain instructions for processing multimedia items in accordance with some embodiments. From these various memory units, the processor 910 retrieves instructions to execute and data to process in order to execute the processes of some embodiments.
  • The bus 905 also connects to the input and output devices 930 and 935. The input devices enable the user to communicate information and select commands to the computer system. The input devices 930 include alphanumeric keyboards and cursor-controllers. The output devices 935 display images generated by the computer system. For instance, these devices display IC design layouts. The output devices include printers and display devices, such as cathode ray tubes (CRT) or liquid crystal displays (LCD).
  • Finally, as shown in Figure 9 , bus 905 also couples computer 900 to a network 965 through a network adapter (not shown). In this manner, the computer can be a part of a network of computers (such as a local area network ("LAN"), a wide area network ("WAN"), or an Intranet) or a network of networks (such as the Internet). Any or all of the components of computer system 900 may be used in conjunction with the invention. However, one of ordinary skill in the art will appreciate that any other system configuration may also be used in conjunction with the invention.
  • While the invention has been described with reference to numerous specific details, one of ordinary skill in the art will recognize that the invention can be embodied in other specific forms without departing from the spirit of the invention. For instance, the life cycle analysis can be performed on any user device (such as personal computers, music players, video players, personal digital assistants, cameras, etc.) that is capable of running software to perform the life cycle analysis and has a set of files or other entities whose attributes can be acquired to do the test. Also, the life cycle analysis is not limited to the attributes and file categories shown in the examples above and can be practiced using other attributes and other user device entities to do the test. For instance, the populations of entities in a user device need not be limited to the three mentioned in some examples above, as additional or fewer levels of granularity can be used.
  • In other places, various changes may be made, and equivalents may be substituted for elements described without departing from the true scope of the present invention. For instance, the system, user, and application files and directories where shown as examples of the entities that have known or predictable behavior. Many other entities and populations may be identified for use in the evolution test. For instance, in some embodiments the hardware profile of the user device is also used for the life cycle analysis. Although in the examples above, entities local to the user device were used for the life cycle analysis, in some embodiments, entities in the user device environment including a local area network (LAN) or a wireless LAN (WLAN) are also considered.
  • Also, the evolution test can be performed in user devices running different operating systems. These operating systems may have a different files and folder structure, a different nomenclature for their file structure, may have other attributes that can be monitored, etc. For instance, some operating systems may use the terms directories and sub-directories while others use the term folders and sub-folders. Also, the computer system shown in Figure 9 is just an example of many different hardware configurations that a user device can have. For instance, a portable media player may have a different hardware configuration than shown in Figure 9 .
  • In addition, the snapshots may be taken periodically and/or based on certain events e.g., whenever a user is trying to access a downloaded content or whenever a user has accessed a predetermined number of downloaded content. Also, the evolution test may not be performed at fixed time intervals. Instead, performing the evolution test may be based on the frequency of access to content that require subscription or on any other acceptable criteria determined by trial and error, heuristics, etc. Thus, one of ordinary skill in the art would understand that the invention is not limited by the foregoing illustrative details, but rather is to be defined by the appended claims.
  • Before going on to set out the claims, we shall first provide a set of clauses describing embodiments of the invention:
    1. 1. A digital rights management (DRM) method, comprising:
      1. a) comparing a first set of attributes of a device at a first instance in time with a second set of attributes at a second instance in time; and
      2. b) based on said comparison, determining whether the device has been manipulated to circumvent DRM protection for accessing a set of content on the device.
    2. 2. The method of clause 1, wherein a plurality of said attributes are values associated with entities of the device, wherein comparing the sets of attributes comprises comparing said values.
    3. 3. The method of clause 1, wherein a plurality of said attributes are statistics associated with a plurality of entities of the device, wherein comparing the first and second sets of attributes comprises comparing statistics calculated for a plurality of entities.
    4. 4. The method of clause 1, wherein the attributes comprise absence and presence of at least one entity in the device.
    5. 5. The method of clause 1, wherein the attributes comprise attributes of files and directories of the device.
    6. 6. The method of clause 5, wherein the attributes comprise at least one of size, creation date, last modification date, last access date, absence, and presence of said files and directories of the device.
    7. 7. The method of clause 5, wherein the attributes comprise at least one of attribute associated with a hardware component of the device.
    8. 8. The method of clause 1, wherein said device attributes comprise attributes of an operating system of the device.
    9. 9. The method of clause 1, wherein the device is manipulated when a clock in the device is improperly changed.
    10. 10. The method of clause 1, wherein the device is manipulated when files and directories in the device are manipulated.
    11. 11. The method of clause 1, wherein the device is manipulated when the device hardware configuration is manipulated.
    12. 12. The method of clause 1, wherein said comparing is based on predictable behavior of the first and second sets of attributes.
    13. 13. The method of clause 1, wherein the attributes comprise entities in a network connected to the device.
    14. 14. The method of clause 13, wherein the network is one of a wired network and a wireless network.
    15. 15. The method of clause 1 further comprising requiring the device to synchronize with a remote computer after determining that the device has been manipulated.
    16. 16. The method of clause 1, wherein said comparison comprises:
      1. (a) identifying differences in the sets of attributes at the first and second instances in time; and
      2. (b) determining whether said differences are expected.
    17. 17. The method of clause 1, wherein the first and second sets are identical.
    18. 18. The method of clause 1, wherein the first and second sets do not share at least one attribute.
    19. 19. The method of clause 1, wherein the device is a computer.
    20. 20. The method of clause 1, wherein the device is a portable player.
    21. 21. The method of clause 1, wherein the first set of attributes comprise a first collision free images of the first set of entities, wherein the second set of attributes comprise a second collision free images of the second set of entities.
    22. 22. The method of clause 21, wherein each collision free image comprises a population of fast evolving entities in the device.
    23. 23. The method of clause 21, wherein each collision free image comprises a population of slow evolving entities in the device.
    24. 24. The method of clause 21, wherein each collision free image comprises a slow growth population of entities in the device, a fast growth population of entities in the device, and a medium growth population of entities in the device.
    25. 25. The method of clause 21, wherein a collision free image comprises a set of attributes of each entity, wherein said comparison comprises comparing the attributes of the first set of entities with the attributes of the second set of entities.
    26. 26. The method of clause 21, wherein a collision free image comprises a set of statistics associated with a plurality of entities, wherein said comparison comprises comparing statistics calculated for said plurality of entities.
    27. 27. The method of clause 21, wherein the first and second sets of entities are selected so that the first and second collision free images are not identical.
    28. 28. A computer readable medium storing a digital rights management (DRM) program for execution, the program comprising sets of instructions for:
      1. a) comparing a first set of attributes of a device at a first instance in time with a second set of attributes at a second instance in time; and
      2. b) based on said comparison, determining whether the device has been manipulated to circumvent DRM protection for accessing a set of content on the device.
    29. 29. The computer readable medium of clause 28, wherein a plurality of said attributes are values associated with entities of the device, wherein the set of instructions for comparing the sets of attributes comprises a set of instructions for comparing said values.
    30. 30. The computer readable medium of clause 28, wherein a plurality of said attributes are statistics associated with a plurality of entities of the device, wherein the set of instructions for comparing the first and second sets of attributes comprises a set of instructions for comparing statistics calculated for a plurality of entities.
    31. 31. The computer readable medium of clause 28, wherein the attributes comprise absence and presence of at least one entity in the device.
    32. 32. The computer readable medium of clause 28, wherein the attributes comprise attributes of files and directories of the device.
    33. 33. The computer readable medium of clause 28, wherein the attributes comprise at least one of attribute associated with a hardware component of the device.
    34. 34. The computer readable medium of clause 28, wherein said device attributes comprise attributes of an operating system of the device.
    35. 35. The computer readable medium of clause 28, wherein the device is manipulated when a clock in the device is improperly changed.
    36. 36. The computer readable medium of clause 28, wherein the device is manipulated when files and directories in the device are manipulated.
    37. 37. The computer readable medium of clause 28, wherein the device is manipulated when the device hardware configuration is manipulated.
    38. 38. The computer readable medium of clause 28, wherein the comparison is based on predictable behavior of the first and second sets of attributes.
    39. 39. The computer readable medium of clause 28, wherein the attributes comprise entities in a network connected to the device.
    40. 40. The computer readable medium of clause 39, wherein the network is one of a wired network and a wireless network.
    41. 41. The computer readable medium of clause 28, wherein the program further comprises a set of instructions for requiring the device to synchronize with a remote computer after determining that the device has been manipulated.
    42. 42. The computer readable medium of clause 28, wherein the set of instructions for said comparison comprises sets of instructions for:
      1. (a) identifying differences in the sets of attributes at the first and second instances in time; and
      2. (b) determining whether said differences are expected.
    43. 43. The computer readable medium of clause 28, wherein the first and second sets are identical.
    44. 44. The computer readable medium of clause 28, wherein the first and second sets do not share at least one attribute.
    45. 45. The computer readable medium of clause 28, wherein the first set of attributes comprise a first collision free images of the first set of entities, wherein the second set of attributes comprise a second collision free images of the second set of entities.
    46. 46. A method of determining whether a subscription for using content on a device has elapsed, the method comprising:
      1. a) comparing a first collision free image of a first set of entities in the device at a first instance in time with a second collision free image of a second set of entities in the device at a second instance in time; and
      2. b) based on said comparison, determining whether the subscription has elapsed.
    47. 47. A computer readable medium storing program for execution, the program for determining whether a subscription for using content on a device has elapsed, the program comprising sets of instructions for:
      1. a) comparing a first collision free image of a first set of entities in the device at a first instance in time with a second collision free image of a second set of entities in the device at a second instance in time; and
      2. b) based on said comparison, determining whether the subscription has elapsed.
    48. 48. The computer readable medium of clause 47, wherein each collision free image comprises a population of fast evolving entities in the device.
    49. 49. The computer readable medium of clause 47, wherein each collision free image comprises a population of slow evolving entities in the device.
    50. 50. The computer readable medium of clause 47, wherein each collision free image comprises a slow growth population of entities in the device, a fast growth population of entities in the device, and a medium growth population of entities in the device.
    51. 51. The computer readable medium of clause 47, wherein a collision free image comprises a set of attributes of each entity, wherein the set of instructions for comparing comprises a set of instructions for comparing the attributes of the first set of entities with the attributes of the second set of entities.
    52. 52. The computer readable medium of clause 47, wherein a collision free image comprises a set of statistics associated with a plurality of entities, wherein said comparison comprises comparing statistics calculated for said plurality of entities.
    53. 53. The computer readable medium of clause 52, wherein the statistics are at least partly calculated at the time of the generation of the collision free images.
    54. 54. The computer readable medium of clause 52, wherein the statistics are at least partly calculated at the time of the comparison of the collision free images.
    55. 55. The computer readable medium of clause 47, wherein the first and second sets of entities are identical.
    56. 56. The computer readable medium of clause 47, wherein the first and second sets of entities are not identical.
    57. 57. The computer readable medium of clauses 47, wherein said entities comprise files and directories of the device.
    58. 58. The computer readable medium of clauses 47, wherein said entities comprise hardware configuration of the device.
    59. 59. The computer readable medium of clause 47, wherein said device attributes comprise attributes of an operating system of the device.
    60. 60. The computer readable medium of clause 47, wherein the attributes comprise entities in a network connected to the device.
    61. 61. The computer readable medium of clause 60, wherein the network is one of a wired network and a wireless network.
    62. 62. The computer readable medium of clause 47, wherein the first and second sets of entities are selected so that the first and second collision free images are not identical.
    63. 63. A method comprising:
      1. a) receiving content on subscription basis; and
      2. b) using an evolutionary process to determine whether a subscription to use content has expired.
    64. 64. A computer readable medium storing a program for execution, the program comprising sets of instructions for:
      1. a) receiving content on subscription basis; and
      2. b) using an evolutionary process to determine whether a subscription to use content has expired.
    65. 65. The computer readable medium of clause 64, wherein the set of instructions for using the evolutionary process comprises a set of instructions for determining whether a population of entities related to a device has evolved from a previously sampled population; the program further comprising a set of instructions for specifying a possibility that the subscription has expired wherein when a population has not evolved from a previously sampled population.
    66. 66. The computer readable medium of clause 65, wherein said entities and a set of attributes of said entities are selected from a current population based on a set of criteria, wherein said selected entities are modified to form a new population for evaluating an evolution for a next generation of said entities.
    67. 67. A method comprising:
      1. a) receiving a request regarding status of a subscription for using content on a remote device;
      2. b) determining whether the subscription is valid; and
      3. c) generating a response to the request regarding the status of subscription.
    68. 68. The method of clause 67, wherein the request is received when the remote device determines based on an evolutionary algorithm that the subscription may have expired.
    69. 69. The method of clause 68, wherein the evolutionary algorithm specifies a possible tampering with the remote device to access at least a piece of content based on said subscription.
    70. 70. The method of clause 67, wherein the request is received when an unexpected change occurs for at least one entity on the remote device.
    71. 71. The method of clause 67, wherein generating the response to the request updates the subscription status on the remote device.
    72. 72. The method of clause 67, wherein the remote device is a computer.
    73. 73. The method of clause 67, wherein the remote device is a portable media player.
    74. 74. The method of clause 67 further comprising allowing the subscription to be renewed when the subscription is not valid.
    75. 75. The method of clause 67 further comprising allowing downloading content to the remote device when the subscription is valid.
    76. 76. The method of clause 67, wherein determining whether the subscription is valid comprises using a trusted source of time.
    77. 77. A computer readable medium storing a program for execution, the program comprising sets of instructions for:
      1. a) receiving a request regarding status of a subscription for using content on a remote device;
      2. b) determining whether the subscription is valid; and
      3. c) generating a response to the request regarding the status of subscription.
    78. 78. The computer readable medium of clause 77, wherein the request is received when the remote device determines based on an evolutionary algorithm that the subscription may have expired.
    79. 79. The computer readable medium of clause 78, wherein the evolutionary algorithm specifies a possible tampering with the remote device to access at least a piece of content based on said subscription.
    80. 80. The computer readable medium of clause 77, wherein the request is received when an unexpected change occurs for at least one entity on the remote device.
    81. 81. The computer readable medium of clause 77, wherein generating the response to the request updates the subscription status on the remote device.
    82. 82. The computer readable medium of clause 77, wherein the remote device is a computer.
    83. 83. The computer readable medium of clause 77, wherein the remote device is a player.
    84. 84. A device comprising:
      1. a) content;
      2. b) a plurality of entities; and
      3. c) an internal data storage storing a plurality of attributes for a group of entities, wherein at least two sets of attributes are from two different instances of time, said two sets of attributes for use by an evolutionary process to determine whether the device has been manipulated to circumvent digital rights management (DRM) protection for accessing content on the device.
    85. 85. The device of clause 84, wherein the two sets of attributes have predictable behavior.
    86. 86. The device of clause 84, wherein the attributes comprise absent and present of at least one entity in the device.
    87. 87. The device of clause 84, wherein the attributes comprise attributes of files and directories of the device.
    88. 88. The device of clause 87, wherein the attributes comprise at least one of size, creation date, last modification date, last access date, absence, and presence of said files and directories of the device.
    89. 89. The device of clause 84, wherein the attributes comprise attributes of an operating system of the device.
    90. 90. The device of clause 84, wherein the attributes comprise entities in a network connected to the device.
    91. 91. The device of clause 90, wherein the network is one of a wired network and a wireless network.
    92. 92. The device of clause 84, wherein the device is manipulated when a clock in the device is improperly changed.
    93. 93. The device of clause 84, wherein the device is manipulated when files and directories in the device are manipulated.
    94. 94. The device of clause 84, wherein the device is manipulated when the device hardware configuration is manipulated.
    95. 95. The device of clause 84, wherein the device is a portable player.
    96. 96. The device of clause 84, wherein the device is a computer.
    97. 97. A device for accessing content, the device comprising:
      1. a) a storage for storing content;
      2. b) a plurality of entities; and
      3. c) an electronic component for determining whether a subscription to access content on the device has expired based on the change over time of a plurality of attributes of a plurality of entities.
    98. 98. The device of clause 97, wherein the electronic component determines the subscription has expired when the change over time of at least one attributes is slower than an expected rate.
    99. 99. The device of clause 97, wherein the electronic component determines that the subscription has expired when the change over time of at least one attribute is faster than an expected rate.
    100. 100. The device of clause 97, wherein the plurality of entities are stored on the storage.
    101. 101. The device of clause 97, wherein the plurality of entities comprises at least one hardware component.
    102. 102. The device of clause 97, wherein the device is a computer.
    103. 103. The device of clause 97, wherein the device is a portable player.
    104. 104. The device of clause 97 further comprising a read-memory for storing a set of instructions for:
      1. a) identifying two copies of said attributes at two instances of time; and
      2. b) determining a time for renewing the subscription has expired when at least one attribute has not changed as expected between the two instances of time.
    105. 105. A method comprising:
      1. a) identifying a particular device environment in which a plurality of contents will be accessed;
      2. b) identifying a set of entities on the particular device environment that have attributes with predictable behaviors; and
      3. c) defining a digital rights management (DRM) process for use during a runtime of a device comprising the particular device environment, the DRM process for determining whether the changes to attributes of each entity is as predicted.
    106. 106. The method of clause 105, wherein the particular device environment comprises a set of files on the device.
    107. 107. The method of clause 105, wherein the particular device environment comprises a set of directories on the device.
    108. 108. The method of clause 105, wherein the particular device environment comprises an operating system software.
    109. 109. The method of clause 105, wherein the particular device environment comprises a network the device will be connected.
    110. 110. The method of clause 105, wherein the particular device environment comprises a hardware configuration of the device.
    111. 111. The method of clause 105, wherein the attributes with predictable behaviors are determined by trial and error.
    112. 112. The method of clause 105, wherein the attributes with predictable behaviors are determined by using heuristics.
    113. 113. The method of clause 105, wherein the attributes with predictable behaviors are determined by studying system documents of the particular device environment.
    114. 114. The method of clause 105, wherein the device comprising the particular device environment is a computer.
    115. 115. The method of clause 105, wherein the device comprising the particular device environment is a portable player.
    116. 116. A computer readable medium storing a program for execution, the program comprising sets of instructions for:
      1. a) analyzing attributes of a set of entities on a device at different instances in time when a trusted source of time is not available; and
      2. b) allowing access to the digital media when the attributes have changed within expected thresholds.
    117. 117. The computer readable medium of clause 116, wherein the program further comprises a set of instructions for requiring the device to synchronize a subscription to use the digital media by communicatively connecting to a remote computer with a trusted source of time.
    118. 118. The computer readable medium of clause 116, wherein the program further comprises a set of instructions for estimating time elapsed between different instances of time by analyzing changes in said attributes.

Claims (15)

  1. A method, for an electronic device, for providing access to a piece of content protected by a time-based subscription, the method comprising:
    receiving a request to access the piece of content on the electronic device;
    when a connection to a remote server is available, validating a status of the subscription with the remote server to allow access to the piece of content; and
    when the connection to the remote server is unavailable:
    determining, at the electronic device, whether the subscription has expired by comparing a plurality of attributes of the electronic device from different instances in time; and
    when the electronic device determines that the subscription has expired based on the comparison, requiring validation by the remote server in order to access the piece of content on the electronic device.
  2. The method of claim 1 further comprising, while the connection to the remote server is unavailable, accessing the piece of content when the electronic device determines that the subscription has not expired based on the comparison.
  3. The method of claim 1, wherein the plurality of attributes comprises statistics calculated for a plurality of entities of the electronic device, wherein comparing the plurality of attributes comprises comparing the statistics calculated for the plurality of entities.
  4. The method of claim 1, wherein the plurality of attributes comprises first and second sets of attributes, wherein comparing the plurality of attributes comprises comparing the first set of attributes with the second set of attributes in order to identify differences between the first and second sets of attributes.
  5. The method of claim 4, wherein the request is received at a first instance in time, wherein the first set of attributes are from the first instance in time and the second set of attributes are from a second instance in time, prior to the first instance in time.
  6. The method of claim 4 further comprising accessing the piece of content when the identified differences between the first and second sets of attributes are expected based on time elapsed between the first and second instances in time.
  7. The method of claim 4, wherein each set of attributes comprises values associated with the plurality of entities, wherein comparing the first set of attributes with the second set of attributes comprises comparing the values.
  8. The method of claim 1, wherein the plurality of entities comprises files and directories of the electronic device.
  9. The method of claim 8, wherein the attributes comprise at least one of size, creation date, last modification date, last access date, absence, and presence of the files and directories of the electronic device.
  10. The method of claim 1, wherein, when the electronic device determines that the subscription has expired based on the comparison, sending a request to the remote server to validate the status of the subscription as not expired, after the connection to the remote server becomes available, before allowing access to the piece of content on the electronic device.
  11. The method of claim 10 further comprising renewing the subscription with the remote server in order to continue accessing the piece of content on the electronic device when the remote server validates the status of the subscription as expired.
  12. The method of claim 1, wherein the determination of whether the subscription has expired by comparing the plurality of attributes identifies whether the electronic device has been manipulated in order to circumvent the time-based subscription for accessing the piece of content.
  13. The method of claim 12, wherein the manipulation of the electronic device comprises setting a device clock back.
  14. A machine readable medium storing a program for execution by at least one processing unit, the program comprising sets of instructions for implementing the method according to any of claim 1-13.
  15. An electronic device comprising:
    a set of processing units; and
    a machine readable medium storing a program for execution by at least one of the processing units, the program comprising sets of instructions for implementing the method according to any of claim 1-13.
EP16158631.8A 2006-05-09 2007-05-09 Determining validity of subscription to use digital content Withdrawn EP3093782A1 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US11/382,469 US10528705B2 (en) 2006-05-09 2006-05-09 Determining validity of subscription to use digital content
EP07107862.0A EP1857956B1 (en) 2006-05-09 2007-05-09 Determining validity of subscription to use digital content

Related Parent Applications (1)

Application Number Title Priority Date Filing Date
EP07107862.0A Division EP1857956B1 (en) 2006-05-09 2007-05-09 Determining validity of subscription to use digital content

Publications (1)

Publication Number Publication Date
EP3093782A1 true EP3093782A1 (en) 2016-11-16

Family

ID=38542966

Family Applications (2)

Application Number Title Priority Date Filing Date
EP07107862.0A Not-in-force EP1857956B1 (en) 2006-05-09 2007-05-09 Determining validity of subscription to use digital content
EP16158631.8A Withdrawn EP3093782A1 (en) 2006-05-09 2007-05-09 Determining validity of subscription to use digital content

Family Applications Before (1)

Application Number Title Priority Date Filing Date
EP07107862.0A Not-in-force EP1857956B1 (en) 2006-05-09 2007-05-09 Determining validity of subscription to use digital content

Country Status (8)

Country Link
US (2) US10528705B2 (en)
EP (2) EP1857956B1 (en)
CN (2) CN106055929B (en)
DE (1) DE102007021710A1 (en)
FR (4) FR2902586B1 (en)
HK (1) HK1110130A1 (en)
SE (2) SE539462C2 (en)
WO (1) WO2007134139A2 (en)

Families Citing this family (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10528705B2 (en) 2006-05-09 2020-01-07 Apple Inc. Determining validity of subscription to use digital content
US20130104032A1 (en) * 2011-10-19 2013-04-25 Jiyoun Lee Mobile terminal and method of controlling the same
US10028001B2 (en) * 2016-10-11 2018-07-17 Disney Enterprises, Inc. Systems and methods for providing access to media contents using a rights database
WO2020102687A1 (en) * 2018-11-15 2020-05-22 Edx Technologies, Inc. Augmented reality (ar) imprinting methods and systems
US11228597B2 (en) * 2019-02-12 2022-01-18 Nutanix, Inc. Providing control to tenants over user access of content hosted in cloud infrastructures
KR102380035B1 (en) * 2020-01-30 2022-03-29 팅크웨어(주) Image-processing Apparatus for Car and Method of Processing Data Using The Same

Citations (17)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP0715246A1 (en) * 1994-11-23 1996-06-05 Xerox Corporation System for controlling the distribution and use of composite digital works
US5757908A (en) * 1994-04-25 1998-05-26 International Business Machines Corporation Method and apparatus for enabling trial period use of software products: method and apparatus for utilizing an encryption header
WO2000054128A1 (en) * 1999-03-12 2000-09-14 Curl Corporation System and method for licensing content
EP1055990A1 (en) * 1999-05-28 2000-11-29 Hewlett-Packard Company Event logging in a computing platform
EP1056010A1 (en) * 1999-05-28 2000-11-29 Hewlett-Packard Company Data integrity monitoring in trusted computing entity
US6393126B1 (en) * 1999-06-23 2002-05-21 Datum, Inc. System and methods for generating trusted and authenticatable time stamps for electronic documents
US20020120465A1 (en) * 2001-02-27 2002-08-29 International Business Machines Corporation Utilizing and delivering contents
US20020169974A1 (en) * 2001-03-01 2002-11-14 Microsoft Corporation Detecting and responding to a clock rollback in a digital rights management system on a computing device
WO2004032329A2 (en) * 2002-10-04 2004-04-15 Canal + Technologies Software and method for authenticating same
US20040187014A1 (en) * 2003-03-18 2004-09-23 Molaro Donald Joseph Method and system for implementing digital rights management
US20050132122A1 (en) * 2003-12-16 2005-06-16 Rozas Carlos V. Method, apparatus and system for monitoring system integrity in a trusted computing environment
US20050204209A1 (en) * 2004-01-21 2005-09-15 Nokia Corporation Method for utilizing intelligent clock controller in digital rights management
WO2005104426A2 (en) * 2004-04-14 2005-11-03 Digital River, Inc. Geographic location based licensing system
US20050289072A1 (en) * 2004-06-29 2005-12-29 Vinay Sabharwal System for automatic, secure and large scale software license management over any computer network
US20060008256A1 (en) * 2003-10-01 2006-01-12 Khedouri Robert K Audio visual player apparatus and system and method of content distribution using the same
US20060015717A1 (en) * 2004-07-15 2006-01-19 Sony Corporation And Sony Electronics, Inc. Establishing a trusted platform in a digital processing system
FR2876859A1 (en) * 2004-10-18 2006-04-21 Viaccess Sa METHOD AND SYSTEM FOR CONTROLLING ENABLING INTERNAL SOFTWARE ENABLING A RECEIVER TERMINAL

Family Cites Families (50)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO1993011480A1 (en) * 1991-11-27 1993-06-10 Intergraph Corporation System and method for network license administration
US7124302B2 (en) * 1995-02-13 2006-10-17 Intertrust Technologies Corp. Systems and methods for secure transaction management and electronic rights protection
US5892900A (en) * 1996-08-30 1999-04-06 Intertrust Technologies Corp. Systems and methods for secure transaction management and electronic rights protection
US5883954A (en) * 1995-06-07 1999-03-16 Digital River, Inc. Self-launching encrypted try before you buy software distribution system
US6088693A (en) * 1996-12-06 2000-07-11 International Business Machines Corporation Data management system for file and database management
JP3699807B2 (en) * 1997-06-30 2005-09-28 株式会社東芝 Correlation extractor
US6098054A (en) * 1997-11-13 2000-08-01 Hewlett-Packard Company Method of securing software configuration parameters with digital signatures
US6282175B1 (en) * 1998-04-23 2001-08-28 Hewlett-Packard Company Method for tracking configuration changes in networks of computer systems through historical monitoring of configuration status of devices on the network.
US20020019814A1 (en) * 2001-03-01 2002-02-14 Krishnamurthy Ganesan Specifying rights in a digital rights license according to events
US7430670B1 (en) * 1999-07-29 2008-09-30 Intertrust Technologies Corp. Software self-defense systems and methods
US6591377B1 (en) * 1999-11-24 2003-07-08 Unisys Corporation Method for comparing system states at different points in time
US7092803B2 (en) * 2000-08-18 2006-08-15 Idsc Holdings, Llc Remote monitoring, configuring, programming and diagnostic system and method for vehicles and vehicle components
GB0024919D0 (en) * 2000-10-11 2000-11-22 Sealedmedia Ltd Method of further securing an operating system
US8606684B2 (en) 2000-11-10 2013-12-10 Aol Inc. Digital content distribution and subscription system
EP1246041A1 (en) 2001-03-26 2002-10-02 Tric Ab Method and system for controlling access to contents on a network server
US20020157002A1 (en) 2001-04-18 2002-10-24 Messerges Thomas S. System and method for secure and convenient management of digital electronic content
CA2446584A1 (en) * 2001-05-09 2002-11-14 Ecd Systems, Inc. Systems and methods for the prevention of unauthorized use and manipulation of digital content
DE60212920T3 (en) * 2001-06-07 2016-01-14 Contentguard Holdings, Inc. METHOD AND SYSTEM FOR MANAGING DIGITAL SUBSCRIPTION RIGHTS
US6807542B2 (en) 2001-08-14 2004-10-19 International Business Machines Corporation Method and apparatus for selective and quantitative rights management
US20030084344A1 (en) * 2001-10-31 2003-05-01 Tarquini Richard Paul Method and computer readable medium for suppressing execution of signature file directives during a network exploit
EP1449089A1 (en) * 2001-11-16 2004-08-25 Cranel Incorporated SYSTEM AND METHOD FOR IMPROVING SUPPORT FOR INFORMATION TECHNOLOGY THROUGH COLLECTING, DIAGNOSING AND REPORTING CONFIGURATION, METRIC, AND EVENT INFORMATION
US7076690B1 (en) 2002-04-15 2006-07-11 Emc Corporation Method and apparatus for managing access to volumes of storage
US7103913B2 (en) * 2002-05-08 2006-09-05 International Business Machines Corporation Method and apparatus for determination of the non-replicative behavior of a malicious program
US7512977B2 (en) * 2003-06-11 2009-03-31 Symantec Corporation Intrustion protection system utilizing layers
US7152166B2 (en) 2002-06-26 2006-12-19 Microsoft Corporation Digital rights management (DRM) encryption and data-protection for content on device without interactive authentication
US7926066B2 (en) * 2002-07-09 2011-04-12 Openpages, Inc. Adaptive content platform and application integration with the platform
US7885896B2 (en) * 2002-07-09 2011-02-08 Avaya Inc. Method for authorizing a substitute software license server
US7076696B1 (en) * 2002-08-20 2006-07-11 Juniper Networks, Inc. Providing failover assurance in a device
US7802236B2 (en) * 2002-09-09 2010-09-21 The Regents Of The University Of California Method and apparatus for identifying similar regions of a program's execution
CA2404191A1 (en) * 2002-09-19 2004-03-19 Alcatel Canada Inc. Methods and apparatus for configuration change management in communications networks
US7594271B2 (en) * 2002-09-20 2009-09-22 Widevine Technologies, Inc. Method and system for real-time tamper evidence gathering for software
US7346585B1 (en) * 2003-02-28 2008-03-18 Microsoft Corporation Computer software and services license processing method and system
US20040186903A1 (en) * 2003-03-20 2004-09-23 Bernd Lambertz Remote support of an IT infrastructure
CN101882102A (en) 2003-08-11 2010-11-10 纯安姆芬特有限公司 Be used for the system that automated computer is supported
US7802015B2 (en) * 2004-01-26 2010-09-21 Tantalus Systems Corp. Communications system of heterogeneous elements
US7379600B2 (en) * 2004-01-28 2008-05-27 Microsoft Corporation Method and system for automatically determining differences in a user interface throughout a development cycle
JP2005235058A (en) * 2004-02-23 2005-09-02 Hitachi Ltd Snapshot acquisition method, snapshot acquisition device, and computer program provided with snapshot acquisition function
US20050188222A1 (en) * 2004-02-24 2005-08-25 Covelight Systems, Inc. Methods, systems and computer program products for monitoring user login activity for a server application
US7832012B2 (en) * 2004-05-19 2010-11-09 Computer Associates Think, Inc. Method and system for isolating suspicious email
CN100344160C (en) 2004-07-21 2007-10-17 华为技术有限公司 Method for realizing acquisition of user on-line information
JP2006085360A (en) 2004-09-15 2006-03-30 Hitachi Ltd Expiration date management system and method for content in removable medium
US7287279B2 (en) * 2004-10-01 2007-10-23 Webroot Software, Inc. System and method for locating malware
JP4742682B2 (en) * 2005-06-01 2011-08-10 富士ゼロックス株式会社 Content protection device and content protection release device
US8087092B2 (en) 2005-09-02 2011-12-27 Uniloc Usa, Inc. Method and apparatus for detection of tampering attacks
US8065733B2 (en) * 2005-09-23 2011-11-22 Google, Inc. Method for evolving detectors to detect malign behavior in an artificial immune system
US8732824B2 (en) * 2006-01-23 2014-05-20 Microsoft Corporation Method and system for monitoring integrity of running computer system
US7509468B1 (en) * 2006-02-02 2009-03-24 Symantec Operating Corporation Policy-based data protection
US10528705B2 (en) 2006-05-09 2020-01-07 Apple Inc. Determining validity of subscription to use digital content
US7627745B2 (en) * 2006-06-30 2009-12-01 International Business Machines Corporation Method, system and program product for verifying configuration of a computer system
US9098290B2 (en) * 2008-01-30 2015-08-04 Intuit Inc. Method and apparatus for facilitating diagnostic logging for software components

Patent Citations (17)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5757908A (en) * 1994-04-25 1998-05-26 International Business Machines Corporation Method and apparatus for enabling trial period use of software products: method and apparatus for utilizing an encryption header
EP0715246A1 (en) * 1994-11-23 1996-06-05 Xerox Corporation System for controlling the distribution and use of composite digital works
WO2000054128A1 (en) * 1999-03-12 2000-09-14 Curl Corporation System and method for licensing content
EP1055990A1 (en) * 1999-05-28 2000-11-29 Hewlett-Packard Company Event logging in a computing platform
EP1056010A1 (en) * 1999-05-28 2000-11-29 Hewlett-Packard Company Data integrity monitoring in trusted computing entity
US6393126B1 (en) * 1999-06-23 2002-05-21 Datum, Inc. System and methods for generating trusted and authenticatable time stamps for electronic documents
US20020120465A1 (en) * 2001-02-27 2002-08-29 International Business Machines Corporation Utilizing and delivering contents
US20020169974A1 (en) * 2001-03-01 2002-11-14 Microsoft Corporation Detecting and responding to a clock rollback in a digital rights management system on a computing device
WO2004032329A2 (en) * 2002-10-04 2004-04-15 Canal + Technologies Software and method for authenticating same
US20040187014A1 (en) * 2003-03-18 2004-09-23 Molaro Donald Joseph Method and system for implementing digital rights management
US20060008256A1 (en) * 2003-10-01 2006-01-12 Khedouri Robert K Audio visual player apparatus and system and method of content distribution using the same
US20050132122A1 (en) * 2003-12-16 2005-06-16 Rozas Carlos V. Method, apparatus and system for monitoring system integrity in a trusted computing environment
US20050204209A1 (en) * 2004-01-21 2005-09-15 Nokia Corporation Method for utilizing intelligent clock controller in digital rights management
WO2005104426A2 (en) * 2004-04-14 2005-11-03 Digital River, Inc. Geographic location based licensing system
US20050289072A1 (en) * 2004-06-29 2005-12-29 Vinay Sabharwal System for automatic, secure and large scale software license management over any computer network
US20060015717A1 (en) * 2004-07-15 2006-01-19 Sony Corporation And Sony Electronics, Inc. Establishing a trusted platform in a digital processing system
FR2876859A1 (en) * 2004-10-18 2006-04-21 Viaccess Sa METHOD AND SYSTEM FOR CONTROLLING ENABLING INTERNAL SOFTWARE ENABLING A RECEIVER TERMINAL

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
LIE D ET AL: "Specifying and verifying hardware fo tamper-resistant software", PROCEEDINGS OF THE 2003 IEEE SYMPOSIUM ON SECURITY AND PRIVACY. S&P 2003. BERKELEY, CA, MAY 11 - 14, 2003; [PROCEEDINGS OF THE IEEE SYMPOSIUM ON SECURITY AND PRIVACY], LOS ALAMITOS, CA : IEEE COMP. SOC, US, 11 May 2003 (2003-05-11), pages 166 - 177, XP010639720, ISBN: 978-0-7695-1940-1 *
SMITH K A ET AL: "File system aging-increasing the relevance of file system benchmarks", PERFORMANCE EVALUATION REVIEW ACM USA, vol. 25, no. 1, June 1997 (1997-06-01), pages 203 - 213, XP002567522, ISSN: 0163-5999 *

Also Published As

Publication number Publication date
FR2906955B1 (en) 2012-04-13
SE534152C2 (en) 2011-05-10
EP1857956A2 (en) 2007-11-21
CN101490690B (en) 2016-04-06
FR2902586B1 (en) 2012-04-27
SE539462C2 (en) 2017-09-26
EP1857956A3 (en) 2010-04-07
CN106055929A (en) 2016-10-26
FR2906955A1 (en) 2008-04-11
FR2972090A1 (en) 2012-08-31
SE1150233A1 (en) 2011-03-16
US11615388B2 (en) 2023-03-28
DE102007021710A1 (en) 2007-12-20
WO2007134139A3 (en) 2008-02-28
US10528705B2 (en) 2020-01-07
EP1857956B1 (en) 2016-03-09
HK1110130A1 (en) 2008-07-04
FR2907623A1 (en) 2008-04-25
SE0701124L (en) 2007-11-10
US20070265975A1 (en) 2007-11-15
CN106055929B (en) 2019-06-21
FR2902586A1 (en) 2007-12-21
FR2972090B1 (en) 2019-08-02
WO2007134139A2 (en) 2007-11-22
CN101490690A (en) 2009-07-22
FR2907623B1 (en) 2011-09-16
US20200097638A1 (en) 2020-03-26

Similar Documents

Publication Publication Date Title
US11615388B2 (en) Determining validity of subscription to use digital content
US7849017B2 (en) Enforced seat-based licensing
US9246916B2 (en) Specifying rights in a digital rights license according to events
EP0684538B1 (en) Apparatus and method for software access
US7134144B2 (en) Detecting and responding to a clock rollback in a digital rights management system on a computing device
US5579222A (en) Distributed license administration system using a local policy server to communicate with a license server and control execution of computer programs
CA2533076C (en) Flexible licensing architecture for licensing digital application
CN102595194B (en) Digital rights management using trusted time
TWI446180B (en) A method, system, and computer program product of controlling use of a computer program
US20080109241A1 (en) Method, System and Computer Program For Metering Usage of Software Products With a Dynamically Optimised License Use
US20110099547A1 (en) Approaches for installing software using bios
WO2007011584A2 (en) Digital application operating according to aggregation of plurality of licenses
US20020128976A1 (en) Method and system for tracking software licenses and usage
EP2033110A1 (en) Independent computation environment and provisioning of computing device functionality
EP1466228A2 (en) A computer-implemented method and system for controlling use of digitally encoded products
US7941377B2 (en) Method and apparatus for metering usage of software products with automatic catalog population
JP3993036B2 (en) License management method, license management system, license management program
US9355224B1 (en) System and method for dynamic adjustment of expiration date for authorization key for antivirus products
US20050182965A1 (en) Proxy permissions controlling access to computer resources
JP2002287845A (en) License management system and license management program

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 20160304

AC Divisional application: reference to earlier application

Ref document number: 1857956

Country of ref document: EP

Kind code of ref document: P

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LI LT LU LV MC MT NL PL PT RO SE SI SK TR

RAP1 Party data changed (applicant data changed or rights of an application transferred)

Owner name: APPLE INC.

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: EXAMINATION IS IN PROGRESS

17Q First examination report despatched

Effective date: 20190523

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: EXAMINATION IS IN PROGRESS

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN

18D Application deemed to be withdrawn

Effective date: 20210112